Skip to content

Add contact support links in identity verification page

Eugie Limpin requested to merge el-add-contact-support-links into master

What does this MR do and why?

Implements https://gitlab.com/gitlab-org/modelops/anti-abuse/team-tasks/-/issues/767.

Add contact support links in identity verification page

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Email step Phone step Credit card step
email pn cc

How to set up and validate locally

  1. Start GDK simulating SaaS

    $ export GITLAB_SIMULATE_SAAS=1
    $ gdk start
  2. Enable FFs and update required settings

    $ rails c
    > Feature.enable(:identity_verification)
    > Feature.enable(:identity_verification_phone_number)
    > Feature.enable(:identity_verification_credit_card)
    > ApplicationSetting.first.update(email_confirmation_setting: 'hard', require_admin_approval_after_user_signup: false)
  3. Setup Arkose

    > ApplicationSetting.first.update(arkose_labs_public_api_key: "XXX", arkose_labs_private_api_key: "YYY", )

    Note: credentials are in 1Password under ArkoseLabs API keys (DEVELOPMENT)

  4. Setup Telesign

    $ rails c
    > ApplicationSetting.first.update(telesign_customer_xid: '<value_is_in_1Pass>', telesign_api_key: '<value_is_in_1Pass>')

    Credentials are in 1Password under Telesign API Keys (use GITLAB - DEVELOPMENT)

  5. Go to http://localhost:3000/users/sign_up, fill in the signup form, and then click Register

  6. Verify that you are redirected to Identity Verification page and the current step is email verification with link to contact support (see Email step screenshot above)

  7. Set the new user's Arkose risk score to 'Medium'. This will require the user to verify their email, and phone number.

    $ rails c
    > User.last.custom_attributes.find_by_key('arkose_risk_band').update(value: 'Medium')
  8. Update the user's confirmed_at in Rails console. This marks them as email-verified and move them on to phone number verification step

    $ rails c
    > User.last.update(confirmed_at: Time.now)
  9. Reload the page

  10. Enter a phone number to send a code

  11. Verify that the page looks like Phone step screenshot above

  12. Click on Verify with credit card instead? link

  13. Verify that the page looks like Credit card step screenshot above

Edited by Eugie Limpin

Merge request reports

Loading