+
{{item.card_heading}}
@@ -68,10 +69,8 @@
{% endfor %}
- See if Notify is right for you
- Notify.gov is a product of the Public Benefits Studio , a product accelerator inside
+
See if Notify is right for you
+ Notify.gov is a product of the Public Benefits Studio , a product accelerator inside
the federal government.
-
-
{% endblock %}
diff --git a/app/templates/views/about/security.html b/app/templates/views/about/security.html
new file mode 100644
index 000000000..9ebc0420f
--- /dev/null
+++ b/app/templates/views/about/security.html
@@ -0,0 +1,66 @@
+{% extends "base.html" %}
+
+{% set page_title = "Security" %}
+
+{% block per_page_title %}
+{{page_title}}
+{% endblock %}
+
+{% block content_column_content %}
+
+
+ {{page_title}}
+ Notify.gov is built for the needs of government agencies with fundamental system
+ security processes in place to:
+
+
+ protect user data
+ keep systems secure
+ manage risks around information
+
+
+ Notify.gov operates under a full three-year Authority-to-Operate (ATO) . This
+ federal security authorization process leverages security
+ controls provided by National Institute of Standards and Technology (NIST).
+
+
+
+ Our infrastructure runs on cloud.gov and utilizes several
+ services through Amazon Web
+ Services (AWS), including
+ AWS SNS for sending SMS
+ messages.
+
+ For more information about the Notify.gov infrastructure, contact us at notify-support@gsa.gov .
+ Data
+
+ On Notify.gov, data is encrypted both in transit and at rest. To send a message, agencies upload a spreadsheet of
+ phone numbers and other necessary data from their existing data management system.
+
+
+ Notify.gov is not a system of record, so it does not have a System of Records Notice (SORN). Agencies are
+ responsible for managing their data outside of Notify.gov.
+
+ Data retention
+
+ Any data uploads that have recipient data are held for seven calendar days; personally identifiable information
+ (PII) is never stored in Notifyโs database.
+
+ Multi-Factor Authentication
+
+ Notify.gov uses Login.gov for enhanced security.
+ Login.gov is an extra layer of security created by the government that uses multi-factor authentication and stronger
+ passwords to protect your account.
+
+
+ To access Notify.gov, users will use a Login.gov account associated with their agency (.gov) email with one of the
+ multi-factor authentication
+ methods offered through Login.gov.
+
+
+{% endblock %}
diff --git a/app/templates/views/about/why-text-messaging.html b/app/templates/views/about/why-text-messaging.html
new file mode 100644
index 000000000..6aa0887cb
--- /dev/null
+++ b/app/templates/views/about/why-text-messaging.html
@@ -0,0 +1,86 @@
+{% extends "base.html" %}
+{% set page_title = "Why text messaging" %}
+
+{% block per_page_title %}
+{{page_title}}
+{% endblock %}
+
+{% block content_column_content %}
+
+
+
+ {{page_title}}
+ Reach people using a common method
+
+ Confusing or unreceived notifications are one of the largest barriers to people getting and keeping
+ benefits. The typical ways the government communicates with people often fall short. Low income households are more
+ likely to experience housing instability, which means paper mail, already slow, can easily be missed.
+
+
+
+ Pew Research shows that nearly all adults in the US have a cell phone. Reliance on smartphones
+ for online access is especially common among Americans with lower household incomes and those with lower levels of
+ formal education. Of those earning less than $30,000 a year, 28% say their mobile phone is the sole method to
+ digitally connect.
+
+
+ This means that for many people who rely on government services, cell phones may be the most reliable place to meet
+ people where they already are.
+
+ Improve customer experience
+
+ Text messages can deliver concise information and drive an audience to take action quickly. Timely reminders sent
+ via text message have been proven to decrease re-enrollment churn and save money for administering agencies.
+
+
+ Texting not only helps programs reach people using a nearly-universal communication method, it is a cost effective
+ way to do so. With Notify.gov you can get started for free , allowing you to try out
+ texting to complement your existing communications and outreach strategies.
+
+ What texting is best for
+
+ Agencies, like you, are already using Notify.gov to text about the following programs.
+
+ {% set card_contents = [
+ {
+ "image_src": asset_url('images/calendar.svg'),
+ "card_heading": "Reminders",
+ "p_text": "In a text bubble // Your Quality Control food phone interview is on ((date)) at ((time)). Failure to
+ attend may lead to closure of your benefits. Call 1-800-222-3333 with questions.",
+ "alt_text": "reminder text example"
+ },
+ {
+ "image_src": asset_url('images/alert.svg'),
+ "card_heading": "Alerts to take action",
+ "p_text": "In a text bubble // Your household's Medicaid coverage is expiring. To keep getting Medicaid, you must
+ complete your renewal by ((date)). You can renew online at dhs.state.govโฆ",
+ "alt_text": "alerts text example"
+ },
+ {
+ "image_src": asset_url('images/alarm.svg'),
+ "card_heading": "Important status updates",
+ "p_text": "In a text bubble // Your passport has been issued at the Los Angeles Passport Agency. Please come to the
+ desk between 1:30pm and 2:30pm today to pick up your passportโฆ",
+ "alt_text": "status update text example"
+ },
+ ] %}
+ {% for item in card_contents %}
+
+
+
+
{{item.card_heading}}
+
{{item.p_text}}
+
+ {% if item.image_src %}
+
+ {% endif %}
+
+
+{% endblock %}
diff --git a/app/utils/csv.py b/app/utils/csv.py
index 4ed6d16b5..79e3535c8 100644
--- a/app/utils/csv.py
+++ b/app/utils/csv.py
@@ -103,6 +103,7 @@ def generate_notifications_csv(**kwargs):
"Carrier Response",
"Status",
"Time",
+ "Carrier",
]
for header in original_column_headers:
if header.lower() != "phone number":
@@ -118,6 +119,7 @@ def generate_notifications_csv(**kwargs):
"Carrier Response",
"Status",
"Time",
+ "Carrier",
]
yield ",".join(fieldnames) + "\n"
@@ -140,6 +142,7 @@ def generate_notifications_csv(**kwargs):
notification["provider_response"],
notification["status"],
preferred_tz_created_at,
+ notification["carrier"],
]
for header in original_column_headers:
if header.lower() != "phone number":
@@ -158,6 +161,7 @@ def generate_notifications_csv(**kwargs):
notification["provider_response"],
notification["status"],
preferred_tz_created_at,
+ notification["carrier"],
]
yield Spreadsheet.from_rows([map(str, values)]).as_csv_data
diff --git a/tests/app/test_navigation.py b/tests/app/test_navigation.py
index 15be17081..f469f2586 100644
--- a/tests/app/test_navigation.py
+++ b/tests/app/test_navigation.py
@@ -18,6 +18,7 @@ EXCLUDED_ENDPOINTS = tuple(
Navigation.get_endpoint_with_blueprint,
{
"about_notify",
+ "about_security",
"accept_invite",
"accept_org_invite",
"accessibility_statement",
@@ -218,6 +219,7 @@ EXCLUDED_ENDPOINTS = tuple(
"suspend_service",
"template_history",
"template_usage",
+ "test_feature_flags",
"tour_step",
"trial_mode",
"trial_mode_new",
@@ -257,6 +259,7 @@ EXCLUDED_ENDPOINTS = tuple(
"view_template_version",
"view_template_versions",
"who_its_for",
+ "why_text_messaging",
"write_for_action",
},
)
diff --git a/tests/app/utils/test_csv.py b/tests/app/utils/test_csv.py
index d603fcd0e..db4b6a0ec 100644
--- a/tests/app/utils/test_csv.py
+++ b/tests/app/utils/test_csv.py
@@ -58,6 +58,7 @@ def _get_notifications_csv(
"to": recipient,
"recipient": recipient,
"client_reference": "ref 1234",
+ "carrier": "AT&T Mobility",
}
for i in range(rows)
],
@@ -88,15 +89,15 @@ def get_notifications_csv_mock(
(
None,
[
- "Phone Number,Template,Sent by,Batch File,Carrier Response,Status,Time\n",
- "8005555555,foo,,,Did not like it,Delivered,1943-04-19 08:00:00 AM US/Eastern\r\n",
+ "Phone Number,Template,Sent by,Batch File,Carrier Response,Status,Time,Carrier\n",
+ "8005555555,foo,,,Did not like it,Delivered,1943-04-19 08:00:00 AM US/Eastern,AT&T Mobility\r\n",
],
),
(
"Anne Example",
[
- "Phone Number,Template,Sent by,Batch File,Carrier Response,Status,Time\n",
- "8005555555,foo,Anne Example,,Did not like it,Delivered,1943-04-19 08:00:00 AM US/Eastern\r\n", # noqa
+ "Phone Number,Template,Sent by,Batch File,Carrier Response,Status,Time,Carrier\n",
+ "8005555555,foo,Anne Example,,Did not like it,Delivered,1943-04-19 08:00:00 AM US/Eastern,AT&T Mobility\r\n", # noqa
],
),
],
@@ -135,6 +136,7 @@ def test_generate_notifications_csv_without_job(
"Carrier Response",
"Status",
"Time",
+ "Carrier",
],
[
"8005555555",
@@ -144,6 +146,7 @@ def test_generate_notifications_csv_without_job(
"Did not like it",
"Delivered",
"1943-04-19 08:00:00 AM US/Eastern",
+ "AT&T Mobility",
],
),
(
@@ -159,6 +162,7 @@ def test_generate_notifications_csv_without_job(
"Carrier Response",
"Status",
"Time",
+ "Carrier",
"a",
"b",
"c",
@@ -171,6 +175,7 @@ def test_generate_notifications_csv_without_job(
"Did not like it",
"Delivered",
"1943-04-19 08:00:00 AM US/Eastern",
+ "AT&T Mobility",
"๐",
"๐",
"๐ฆ",
@@ -189,6 +194,7 @@ def test_generate_notifications_csv_without_job(
"Carrier Response",
"Status",
"Time",
+ "Carrier",
"a",
"b",
"c",
@@ -201,6 +207,7 @@ def test_generate_notifications_csv_without_job(
"Did not like it",
"Delivered",
"1943-04-19 08:00:00 AM US/Eastern",
+ "AT&T Mobility",
"๐,๐",
"๐,๐",
"๐ฆ",
diff --git a/tests/end_to_end/test_best_practices_content_pages.py b/tests/end_to_end/test_best_practices_content_pages.py
new file mode 100644
index 000000000..962100de3
--- /dev/null
+++ b/tests/end_to_end/test_best_practices_content_pages.py
@@ -0,0 +1,72 @@
+import os
+import re
+
+from playwright.sync_api import expect
+
+from tests.end_to_end.conftest import check_axe_report
+
+E2E_TEST_URI = os.getenv("NOTIFY_E2E_TEST_URI")
+
+
+def test_best_practices_side_menu(authenticated_page):
+ page = authenticated_page
+
+ page.goto(f"{E2E_TEST_URI}/best-practices")
+
+ page.wait_for_load_state("domcontentloaded")
+ check_axe_report(page)
+
+ response = page.request.get(f"{E2E_TEST_URI}/test/feature-flags")
+ feature_flags = response.json()
+ feature_best_practices_enabled = feature_flags.get("FEATURE_BEST_PRACTICES_ENABLED")
+
+ if feature_best_practices_enabled:
+ page.get_by_role("link", name="Best Practices").click()
+ expect(page).to_have_title(re.compile("Best Practice"))
+
+ page.get_by_role("link", name="Clear goals", exact=True).click()
+ expect(page).to_have_title(re.compile("Establish clear goals"))
+
+ page.get_by_role("link", name="Rules and regulations").click()
+ expect(page).to_have_title(re.compile("Rules and regulations"))
+
+ page.get_by_role("link", name="Establish trust").click()
+ expect(page).to_have_title(re.compile("Establish trust"))
+
+ page.get_by_role("link", name="Write for action").click()
+ expect(page).to_have_title(re.compile("Write texts that provoke"))
+
+ page.get_by_role("link", name="Multiple languages").click()
+ expect(page).to_have_title(re.compile("Text in multiple languages"))
+
+ page.get_by_role("link", name="Benchmark performance").click()
+ expect(page).to_have_title(re.compile("Measuring performance with"))
+
+ parent_link = page.get_by_role("link", name="Establish trust")
+ parent_link.hover()
+
+ submenu_item = page.get_by_role("link", name=re.compile("Get the word out"))
+ submenu_item.click()
+
+ expect(page).to_have_url(re.compile(r"#get-the-word-out"))
+
+ anchor_target = page.locator("#get-the-word-out")
+ expect(anchor_target).to_be_visible()
+ anchor_target.click()
+
+
+def test_breadcrumbs_best_practices(authenticated_page):
+ page = authenticated_page
+
+ page.goto(f"{E2E_TEST_URI}/best-practices")
+
+ page.wait_for_load_state("domcontentloaded")
+ check_axe_report(page)
+
+ response = page.request.get(f"{E2E_TEST_URI}/test/feature-flags")
+ feature_flags = response.json()
+ feature_best_practices_enabled = feature_flags.get("FEATURE_BEST_PRACTICES_ENABLED")
+
+ if feature_best_practices_enabled:
+ page.get_by_role("link", name="Clear goals", exact=True).click()
+ page.locator("ol").get_by_role("link", name="Best Practices").click()