Bug #19041: IAM > Security Policy - Pre-Development - S-MADP Customer Support & Information Center

Bug #19041

IAM > Security Policy

Added by Low Dylan 11 months ago. Updated 9 months ago.

Status:

Closed

Start date:

01 December 2023

Priority:

Normal

Due date:

Assignee:

chok yee fan

% Done:

Category:

Spent time:

Target version:

Description

Security Policy - 80% UI with intergrated BE

What is the issue?

Screenshot 2023-12-01 at 3.48.05 PM.png (1.01 MB) chok yee fan, 01 December 2023 03:48 PM

Screenshot 2024-01-16 at 3.25.55 PM.png - errorNetwork (513 KB) chok yee fan, 16 January 2024 03:26 PM

Screenshot 2024-01-23 at 1.19.37 PM.png - noBreadcrumb (236 KB) chok yee fan, 23 January 2024 01:19 PM

WhatsApp Image 2024-01-24 at 11.24.23 AM.jpeg - Wrong title in breadcrumb (106 KB) Tan Jiau Yan, 24 January 2024 11:24 AM

Screenshot 2024-01-29 at 11.42.43 AM.png - keyInOtherFieldsReflectAccess Token Lifespan (250 KB) chok yee fan, 29 January 2024 11:42 AM

History

#1 Updated by chok yee fan 11 months ago

File Screenshot 2023-12-01 at 3.48.05 PM.png added

After click Save from modify cause error.

#2 Updated by chok yee fan 11 months ago

Assignee changed from chok yee fan to Tan Jiau Yan

try to solve the error

#3 Updated by Tan Jiau Yan 11 months ago

Status changed from New to Feedback

Problem: when update the notUsername and notEmail to false it always return null.

updateAction payload :

securityPolicyBean
: {mandatoryFields: [], infoMessages: [], errorMessages: [], warnMessages: [],…}
accessTokenLifespan
:
"1800"
errorMessages
:
[]
infoMessages
:
[]
mandatoryFields
:
[]
passwordPolicyBean
: {mandatoryFields: [], infoMessages: [], errorMessages: [], warnMessages: [], length: "5",…}
digits
:
1
errorMessages
:
[]
forceExpiredPasswordChange
:
365
infoMessages
:
[]
length
:
"5"
lowerCase
:
1
mandatoryFields
:
[]
maxLength
:
"20"
notEmail
:
false
notUsername
:
false
passwordHistory
:
"4"
specialChars
:
"1"
upperCase
:
1
warnMessages
:
[]
ssoSessionIdleTimeout
:
"3600"
ssoSessionMaxLifespan
:
"36000"
warnMessages
:
[]

updateAction preview:

{responseTimestamp: "2023-12-04T11:02:02.951+08:00",…}
bdResponseCode
:
null
bdResponseMessage
:
null
bdobject
:
null
headerBean
: {serviceID: "FUNC_SAVE_UPDATE_SECURITY_POLICY", requestInfo: null, bddispatchURL: null, bdvmurl: null}
responseCode
:
"00300"
responseMessage
:
"Success OK."
responseTimestamp
:
"2023-12-04T11:02:02.951+08:00"
securityPolicyBean
:
null
sessionID
:
null
tranxID
:
"26616504"

viewAction preview after update:

{responseTimestamp: "2023-12-04T11:02:03.296+08:00",…}
bdResponseCode
:
null
bdResponseMessage
:
null
bdobject
:
null
headerBean
: {serviceID: "FUNC_GET_SECURITY_POLICY", requestInfo: null, bddispatchURL: null, bdvmurl: null}
responseCode
:
"00300"
responseMessage
:
"Success OK."
responseTimestamp
:
"2023-12-04T11:02:03.296+08:00"
securityPolicyBean
: {mandatoryFields: [], infoMessages: [], errorMessages: [], warnMessages: [], accessTokenLifespan: 1800,…}
accessTokenLifespan
:
1800
errorMessages
:
[]
infoMessages
:
[]
mandatoryFields
:
[]
passwordPolicyBean
: {mandatoryFields: [], infoMessages: [], errorMessages: [], warnMessages: [], length: 5, maxLength: 20,…}
digits
:
1
errorMessages
:
[]
forceExpiredPasswordChange
:
365
infoMessages
:
[]
length
:
5
lowerCase
:
1
mandatoryFields
:
[]
maxLength
:
20
notEmail
:
null
notUsername
:
null
passwordHistory
:
4
specialChars
:
1
upperCase
:
1
warnMessages
:
[]
ssoSessionIdleTimeout
:
3600
ssoSessionMaxLifespan
:
36000
warnMessages
:
[]
sessionID
:
null
tranxID
:
"26770572"

#4 Updated by Low Dylan 11 months ago

Status changed from Feedback to Assigned
Assignee changed from Tan Jiau Yan to Low Dylan

Will look into it

#5 Updated by Low Dylan 11 months ago

Status changed from Assigned to Resolved
Assignee changed from Low Dylan to chok yee fan

Please help to add userPolicyBean and allowConcurrentLogin.

View Req :

{
    "sessionID" : "test" 
}

View Response:

{
    "responseTimestamp": "2023-12-08T15:29:05.754+08:00",
    "headerBean": {
        "serviceID": "FUNC_GET_SECURITY_POLICY",
        "bddispatchURL": null,
        "bdvmurl": null,
        "requestInfo": null
    },
    "responseCode": "00300",
    "responseMessage": "Kejayaan",
    "sessionID": "test",
    "tranxID": "37817946",
    "bdResponseCode": null,
    "bdResponseMessage": null,
    "securityPolicyBean": {
        "mandatoryFields": [],
        "infoMessages": [],
        "errorMessages": [],
        "warnMessages": [],
        "accessTokenLifespan": 1800,
        "ssoSessionIdleTimeout": 1800,
        "ssoSessionMaxLifespan": 36000,
        "userPolicyBean": {
            "length": 5,
            "maxLength": 20,
            "digits": 0,
            "specialChars": 0,
            "lowerCase": 6,
            "upperCase": 0
        },
        "passwordPolicyBean": {
            "length": 6,
            "maxLength": 20,
            "digits": 1,
            "specialChars": 1,
            "lowerCase": 1,
            "upperCase": 1,
            "forceExpiredPasswordChange": 365,
            "passwordHistory": 4,
            "notUsername": true,
            "notEmail": false
        },
        "allowConcurrentLogin": false
    },
    "bdobject": null
}

Update Req:

{
    "sessionID": "test",
    "securityPolicyBean": {
        "accessTokenLifespan": 1800,
            "ssoSessionIdleTimeout": 1800,
            "ssoSessionMaxLifespan": 36000,
            "userPolicyBean": {
                "length": 5,
                "maxLength": 20,
                "digits": 0,
                "specialChars": 0,
                "lowerCase": 0,
                "upperCase": 0
            },
            "passwordPolicyBean": {
                "length": 5,
                "maxLength": 20,
                "digits": 1,
                "specialChars": 1,
                "lowerCase": 1,
                "upperCase": 1,
                "forceExpiredPasswordChange": 365,
                "passwordHistory": 4,
                "notUsername": true,
                "notEmail": false
            },
            "allowConcurrentLogin": false
        }
    }
}

Update Resp:

{
    "responseTimestamp": "2023-12-08T15:29:28.843+08:00",
    "headerBean": {
        "serviceID": "FUNC_SAVE_UPDATE_SECURITY_POLICY",
        "bddispatchURL": null,
        "bdvmurl": null,
        "requestInfo": null
    },
    "responseCode": "00300",
    "responseMessage": "Kejayaan",
    "sessionID": "test",
    "tranxID": "97065044",
    "bdResponseCode": null,
    "bdResponseMessage": null,
    "securityPolicyBean": {
        "mandatoryFields": [],
        "infoMessages": [],
        "errorMessages": [],
        "warnMessages": [],
        "accessTokenLifespan": 1800,
        "ssoSessionIdleTimeout": 1800,
        "ssoSessionMaxLifespan": 36000,
        "userPolicyBean": {
            "length": 5,
            "maxLength": 20,
            "digits": 0,
            "specialChars": 0,
            "lowerCase": 0,
            "upperCase": 0
        },
        "passwordPolicyBean": {
            "length": 5,
            "maxLength": 20,
            "digits": 1,
            "specialChars": 1,
            "lowerCase": 1,
            "upperCase": 1,
            "forceExpiredPasswordChange": 365,
            "passwordHistory": 4,
            "notUsername": true,
            "notEmail": false
        },
        "allowConcurrentLogin": false
    },
    "bdobject": null
}

Error Message Example during update:
Req:

{
    "sessionID": "test",
    "securityPolicyBean": {
        "accessTokenLifespan": 1800,
            "ssoSessionIdleTimeout": 1800,
            "ssoSessionMaxLifespan": 36000,
            "userPolicyBean": {
                "length": 5,
                "maxLength": 20,
                "digits": 21,
                "specialChars": 0,
                "lowerCase": 0,
                "upperCase": 0
            },
            "passwordPolicyBean": {
                "length": 5,
                "maxLength": 20,
                "digits": 21,
                "specialChars": 1,
                "lowerCase": 1,
                "upperCase": 1,
                "forceExpiredPasswordChange": 365,
                "passwordHistory": 4,
                "notUsername": true,
                "notEmail": false
            },
            "allowConcurrentLogin": false
        }
    }
}

Resp:

{
    "responseTimestamp": "2023-12-08T15:56:11.403+08:00",
    "headerBean": {
        "serviceID": "FUNC_SAVE_UPDATE_SECURITY_POLICY",
        "bdvmurl": null,
        "bddispatchURL": null,
        "requestInfo": null
    },
    "responseCode": "ERR_200000",
    "responseMessage": "Pengesahan Borang Dalam Talian gagal",
    "sessionID": "test",
    "tranxID": "93498651",
    "bdResponseCode": null,
    "bdResponseMessage": null,
    "securityPolicyBean": {
        "mandatoryFields": [],
        "infoMessages": [],
        "errorMessages": [
            "Bilangan Nombor ID Pengguna nilai tidak sah sebab ia lebih besar daripada panjang maximum.",
            "Jumlah Bilangan Numbor, Angkasa Unik, Huruf Kecil Dan Huruf Besar ID Pengguna nilai tidak sah sebab jumlah panjang adalah lebih besar daripada panjang maximum.",
            "Bilangan Nombor Kata Laluan nilai tidak sah sebab ia lebih besar daripada panjang maximum.",
            "Jumlah Bilangan Numbor, Angkasa Unik, Huruf Kecil Dan Huruf Besar Kata Laluan nilai tidak sah sebab jumlah panjang adalah lebih besar daripada panjang maximum." 
        ],
        "warnMessages": [],
        "accessTokenLifespan": 1800,
        "ssoSessionIdleTimeout": 1800,
        "ssoSessionMaxLifespan": 36000,
        "userPolicyBean": {
            "length": 5,
            "maxLength": 20,
            "digits": 21,
            "specialChars": 0,
            "lowerCase": 0,
            "upperCase": 0
        },
        "passwordPolicyBean": {
            "length": 5,
            "maxLength": 20,
            "digits": 21,
            "specialChars": 1,
            "lowerCase": 1,
            "upperCase": 1,
            "forceExpiredPasswordChange": 365,
            "passwordHistory": 4,
            "notUsername": true,
            "notEmail": false
        },
        "allowConcurrentLogin": false
    },
    "bdobject": null
}

#6 Updated by chok yee fan 10 months ago

Status changed from Resolved to Assigned
Assignee changed from chok yee fan to Hazimi Muhammad

map the fields base on BE request and response

#7 Updated by Low Dylan 10 months ago

Please hide the concurrent login field

#8 Updated by Hazimi Muhammad 10 months ago

Status changed from Assigned to Resolved
Assignee changed from Hazimi Muhammad to chok yee fan

Hazimi - Bug #19041 - IAM > Security Policy- Fix the update form

~/Documents/React/mleb-iam/cc_iam/src/pages/security-policy
SecurityPolicyForm.tsx

#9 Updated by chok yee fan 10 months ago

Status changed from Resolved to Assigned
Assignee changed from chok yee fan to Low Dylan

No Audit info return from BE.
createDt: string;
createBy: string;
modifyDt: string;
modifyBy: string;

#10 Updated by Low Dylan 10 months ago

Status changed from Assigned to Resolved
Assignee changed from Low Dylan to chok yee fan

Committed to bd_iam.

Added at response as below.

{
"responseTimestamp": "2023-12-21T14:11:28.337+08:00",
"headerBean": {
"serviceID": "FUNC_GET_SECURITY_POLICY",
"requestInfo": null,
"bddispatchURL": null,
"bdvmurl": null
},
"responseCode": "00300",
"responseMessage": "Success OK.",
"sessionID": "test",
"tranxID": "02054640",
"bdResponseCode": null,
"bdResponseMessage": null,
"securityPolicyBean": {
"mandatoryFields": [],
"infoMessages": [],
"errorMessages": [],
"warnMessages": [],
"accessTokenLifespan": 7200,
"ssoSessionIdleTimeout": 7200,
"ssoSessionMaxLifespan": 86400,
"userPolicyBean": {
"length": 5,
"maxLength": 20,
"digits": 0,
"specialChars": 0,
"lowerCase": 0,
"upperCase": 0
},
"passwordPolicyBean": {
"length": 5,
"maxLength": 20,
"digits": 1,
"specialChars": 1,
"lowerCase": 1,
"upperCase": 1,
"forceExpiredPasswordChange": 365,
"passwordHistory": 4,
"notUsername": true,
"notEmail": false
},
"allowConcurrentLogin": true,
"createDt": "2023-12-07T02:22:56.201+08:00",
"createBy": "mleb_dba",
"modifyDt": "2023-12-08T16:23:51.881+08:00",
"modifyBy": "dylanlow"
},
"bdobject": null
}

#11 Updated by chok yee fan 10 months ago

Status changed from Resolved to Assigned
Assignee changed from chok yee fan to Hazimi Muhammad

please put it auditUI into the form

#12 Updated by Hazimi Muhammad 10 months ago

Hazimi - Bug #19041 - IAM > Security Policy - AuditUI into the form is added

~/Documents/React/mleb-iam/cc_iam/src/pages/security-policy
SecurityPolicy.tsx
SecurityPolicyForm.tsx

#13 Updated by Hazimi Muhammad 10 months ago

Assignee changed from Hazimi Muhammad to chok yee fan

#14 Updated by chok yee fan 9 months ago

File Screenshot 2024-01-16 at 3.25.55 PM.png added
Status changed from Assigned to Feedback
Assignee changed from chok yee fan to Hazimi Muhammad

issue
----
Click Modify -> enter invalid characters into Access Token Lifespan e.g 720000zxczxczxc -> Click Save -> Display Successful alert.

expected
----
1. Click Modify -> enter invalid characters into Access Token Lifespan e.g 720000zxczxczxc -> Click Save -> Show error alert.
2. Fields not control should enter numberic or alpha numeric.