Ryan Ahearn
db62e318ca
Address moderate and low owasp findings
...
* CORS headers removed because browsers should not interact with API directly
* Updated error handling to return expected content-type for JSON error messages
2023-04-19 09:27:24 -04:00
Ryan Ahearn
e07b596857
Remove contact list db, dao, and s3 code
2023-04-12 15:01:24 -04:00
Ryan Ahearn
f7418d62cb
Remove ServiceContactList from db
2023-04-12 13:30:13 -04:00
Kenneth Kehl
27d86c949a
#224 remove crown ( #228 )
...
Co-authored-by: Kenneth Kehl <@kkehl@flexion.us >
2023-04-11 16:29:37 -04:00
Ryan Ahearn
5f56186859
Merge pull request #197 from GSA/dev-infra-setup
...
Add scripts for provisioning development credentials
2023-03-15 16:40:40 -04:00
Steven Reilly
8d87b6ec09
Add a total-message daily limit ( #195 )
2023-03-14 16:28:38 -04:00
Ryan Ahearn
84e7e9b5cf
Use credentials output by terraform/development
2023-03-13 13:44:10 -04:00
Ryan Ahearn
22aa7e2787
Remove default creds from s3 module
2023-03-03 16:01:12 -05:00
Ryan Ahearn
40ec79e74c
Only use service sender value if it is valid for SNS OriginationNumber
2023-03-03 15:40:21 -05:00
Ryan Ahearn
c58a151e65
Merge branch 'main' into use-sns-service
...
* main:
Remove letters-related code (#175 )
2023-03-03 08:53:32 -05:00
Steven Reilly
ff4190a8eb
Remove letters-related code ( #175 )
...
This deletes a big ol' chunk of code related to letters. It's not everything—there are still a few things that might be tied to sms/email—but it's the the heart of letters function. SMS and email function should be untouched by this.
Areas affected:
- Things obviously about letters
- PDF tasks, used for precompiling letters
- Virus scanning, used for those PDFs
- FTP, used to send letters to the printer
- Postage stuff
2023-03-02 20:20:31 -05:00
Ryan Ahearn
dd0c7ebd56
Update sms sender numbers in db
2023-03-01 13:46:08 -05:00
Ryan Ahearn
28f8649444
Use sns credentials from VCAP_SERVICES
2023-02-28 16:50:00 -05:00
Ryan Ahearn
71010e78d8
Fix formatting for secret code to ensure 0 padding no matter the passed length
2023-02-22 10:48:15 -05:00
Ryan Ahearn
e26bc5095c
Use cryptographically secure random number for sms codes
...
Also, increase token length to 6 digits
2023-02-17 11:54:17 -05:00
Ryan Ahearn
496bf80c77
Merge pull request #174 from GSA/ses-brokerpak
...
Provision SES via brokerpak
2023-02-06 11:28:23 -05:00
Steven Reilly
dc06b411ca
Update default templates and add update command ( #166 )
...
This commit adds config_files for default data and, using that, creates a new way to update our default templates without needing to hardcode a migration.
---------
Co-authored-by: Ryan Ahearn <ryan.ahearn@gsa.gov >
2023-02-03 10:11:21 -05:00
Ryan Ahearn
d1c03e5e8c
Get SES config from VCAP_SERVICES
2023-01-31 17:27:17 -05:00
Ryan Ahearn
bfeb65c914
Install newrelic and enable in development
2023-01-18 09:06:09 -05:00
Ryan Ahearn
828671ecfc
Remove obsolete strip_leading_plus_one method
2023-01-06 11:14:45 -05:00
Ryan Ahearn
8a0535fa03
Save normalized phone format to DB
2023-01-06 11:06:23 -05:00
Ryan Ahearn
abc7b09d0d
Update app to utilize updated phone validation methods
2023-01-05 11:06:12 -05:00
Ryan Ahearn
7878316790
Remove placeholder sms callback comments
2023-01-03 10:23:14 -05:00
Ryan Ahearn
44a4b2d1a9
Remove firetext from notifications_sms_callback.py
2022-12-22 10:01:12 -05:00
Ryan Ahearn
77afecf8d2
Remove mmg & firetext from research_mode_tasks.py
2022-12-22 09:31:12 -05:00
Ryan Ahearn
041cd08097
Clean up more mmg and firetext references
2022-12-22 09:31:12 -05:00
Ryan Ahearn
6a04be0370
Remove firetext and mmg from inbound SMS options
2022-12-22 09:31:12 -05:00
Ryan Ahearn
431f7aeb3c
Gracefully handle decryption errors in past-7-days notification reports
2022-12-13 14:18:34 -05:00
Ryan Ahearn
17ee4c3f2b
Use encrypt/decrypt methods in place of signing
2022-12-12 16:41:04 -05:00
Ryan Ahearn
b553ea4c77
Update uses of encryption.encrypt to more accurate encryption.sign
2022-12-07 14:55:05 -05:00
Ryan Ahearn
a2d459c5e6
Merge pull request #129 from GSA/queue-investigation
...
SMS provider cleanup
2022-11-30 15:25:44 -05:00
Ryan Ahearn
45c3e3c277
Remove unused is_delivery_slow_for_providers method
2022-11-30 13:50:49 -05:00
Ryan Ahearn
0ed7a31765
Merge pull request #126 from GSA/open-api
...
Add OpenAPI spec for selected api endpoints
2022-11-30 13:30:26 -05:00
Ryan Ahearn
01cf3dfb9d
Completely remove code to switch sms providers on slow delivery
2022-11-30 11:08:55 -05:00
Ryan Ahearn
865471efb5
SMS provider fixes to config
...
Disable the method that could accidentally set sms to go to non-sns provider
until they are completely removed
2022-11-29 16:38:32 -05:00
Ryan Ahearn
286400aa18
Use only stdout logging in cloud.gov
2022-11-22 12:11:11 -05:00
stvnrlly
7f5c3c785e
est_date to local_date, too
2022-11-21 12:05:23 -05:00
stvnrlly
9e7ee1c0f8
migrate bst_date to local_date
2022-11-21 11:49:59 -05:00
stvnrlly
99de747a36
fix formatting
2022-11-21 11:29:38 -05:00
Ryan Ahearn
1e7d99e853
Fix flake8 and isort findings
2022-11-18 12:39:50 -05:00
Ryan Ahearn
2efed403b1
Add external API for sending SMS to openapi
2022-11-18 12:25:45 -05:00
Ryan Ahearn
f71df236b7
Add more admin api endpoints
2022-11-18 11:43:46 -05:00
Ryan Ahearn
3b7dbddc58
Add /user routes to openapi schema
2022-11-17 10:57:34 -05:00
stvnrlly
c8533ae524
pull timezone from utils for other pytz instances
2022-11-16 16:53:55 -05:00
Ryan Ahearn
7c611e993f
Read openapi schema for the owasp scan
2022-11-16 15:50:08 -05:00
stvnrlly
e6d30394ba
london → local
2022-11-16 14:11:52 -05:00
stvnrlly
052f911ca8
rename billing date function to clearer about timezone
2022-11-16 12:54:08 -05:00
stvnrlly
6908bd3cf5
use only convert_utc_to_local_timezone
2022-11-16 12:51:46 -05:00
stvnrlly
53019995d1
more time test times
2022-11-14 14:53:28 -05:00
stvnrlly
213f699c99
time adjustments in tests
2022-11-14 14:23:54 -05:00
