You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@fineract.apache.org by am...@apache.org on 2026/10/17 09:31:01 UTC
(fineract-consumer-facing) branch main updated (23f6a5c -> 0415fe2)
This is an automated email from the ASF dual-hosted git repository.
Aman-Mittal pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/fineract-consumer-facing.git
from 23f6a5c Merge pull request #204 from ayushcodes27/feat/114-loan-payment-limit
add 7d8c94a security: bind one-time codes to a purpose and close the registration identity oracle
add 1d0f31d registration: retarget the OTP replay scenario at the state guard
new 0415fe2 Merge pull request #212 from Aman-Mittal/fix/security-hardening
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../service/AuthenticationCommandServiceImpl.java | 5 +-
.../service/BeneficiariesCommandServiceImpl.java | 5 +-
.../IdentityVerificationAttemptCounter.java | 104 +++++++++
.../infrastructure/otp/data/OtpPurpose.java | 56 +++++
.../infrastructure/otp/data/PendingOtp.java | 10 +-
.../otp/repository/OtpRepository.java | 39 ++--
.../otp/service/OtpEmailDeliveryService.java | 11 +-
.../infrastructure/otp/service/OtpService.java | 15 +-
.../infrastructure/otp/service/OtpServiceImpl.java | 33 +--
...n.java => RegistrationNotPendingException.java} | 15 +-
.../service/RegistrationCommandServiceImpl.java | 48 +++-
.../service/TransfersCommandServiceImpl.java | 5 +-
.../user/command/service/UserCommandService.java | 10 +
.../command/service/UserCommandServiceImpl.java | 24 +-
.../AuthenticationCommandServiceImplTest.java | 16 +-
.../BeneficiariesCommandServiceImplTest.java | 28 +--
...RateLimitReset.java => ValkeyCounterReset.java} | 25 +-
.../consumer/cucumber/steps/PasswordSteps.java | 53 +++++
.../consumer/cucumber/steps/RegistrationSteps.java | 24 ++
.../IdentityVerificationAttemptCounterTest.java | 122 ++++++++++
.../otp/repository/OtpRepositoryTest.java | 44 +++-
.../otp/service/OtpServiceImplTest.java | 122 ++++++----
.../RegistrationCommandServiceImplTest.java | 257 +++++++++++++++++++++
.../service/TransfersCommandServiceImplTest.java | 34 +--
.../service/UserCommandServiceImplTest.java | 23 +-
.../src/test/resources/features/password.feature | 18 ++
.../test/resources/features/registration.feature | 26 ++-
docs/consumer/architecture/infrastructure.adoc | 4 +-
docs/consumer/features/identity.adoc | 2 +-
docs/consumer/features/otp.adoc | 25 +-
docs/consumer/features/registration.adoc | 29 +--
frontend/public/i18n/en.json | 1 +
frontend/public/i18n/hi.json | 1 +
33 files changed, 1044 insertions(+), 190 deletions(-)
create mode 100644 consumer/src/main/java/org/apache/fineract/consumer/infrastructure/kyc/service/IdentityVerificationAttemptCounter.java
create mode 100644 consumer/src/main/java/org/apache/fineract/consumer/infrastructure/otp/data/OtpPurpose.java
copy consumer/src/main/java/org/apache/fineract/consumer/registration/command/exception/{IdentityNotVerifiedException.java => RegistrationNotPendingException.java} (65%)
rename consumer/src/test/java/org/apache/fineract/consumer/cucumber/hooks/{RateLimitReset.java => ValkeyCounterReset.java} (68%)
create mode 100644 consumer/src/test/java/org/apache/fineract/consumer/infrastructure/kyc/service/IdentityVerificationAttemptCounterTest.java
create mode 100644 consumer/src/test/java/org/apache/fineract/consumer/registration/command/service/RegistrationCommandServiceImplTest.java
(fineract-consumer-facing) 01/01: Merge pull request #212 from Aman-Mittal/fix/security-hardening
Posted by am...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
Aman-Mittal pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/fineract-consumer-facing.git
commit 0415fe2750f1015247eadac8d092c216f90f6b47
Merge: 23f6a5c 1d0f31d
Author: Aman Mittal <32...@users.noreply.github.com>
AuthorDate: Sat Oct 17 15:00:55 2026 +0530
Merge pull request #212 from Aman-Mittal/fix/security-hardening
security: bind one-time codes to a purpose and close the registration identity oracle
.../service/AuthenticationCommandServiceImpl.java | 5 +-
.../service/BeneficiariesCommandServiceImpl.java | 5 +-
.../IdentityVerificationAttemptCounter.java | 104 +++++++++
.../infrastructure/otp/data/OtpPurpose.java | 56 +++++
.../infrastructure/otp/data/PendingOtp.java | 10 +-
.../otp/repository/OtpRepository.java | 39 ++--
.../otp/service/OtpEmailDeliveryService.java | 11 +-
.../infrastructure/otp/service/OtpService.java | 15 +-
.../infrastructure/otp/service/OtpServiceImpl.java | 33 +--
.../RegistrationNotPendingException.java} | 24 +-
.../service/RegistrationCommandServiceImpl.java | 48 +++-
.../service/TransfersCommandServiceImpl.java | 5 +-
.../user/command/service/UserCommandService.java | 10 +
.../command/service/UserCommandServiceImpl.java | 24 +-
.../AuthenticationCommandServiceImplTest.java | 16 +-
.../BeneficiariesCommandServiceImplTest.java | 28 +--
...RateLimitReset.java => ValkeyCounterReset.java} | 25 +-
.../consumer/cucumber/steps/PasswordSteps.java | 53 +++++
.../consumer/cucumber/steps/RegistrationSteps.java | 24 ++
.../IdentityVerificationAttemptCounterTest.java | 122 ++++++++++
.../otp/repository/OtpRepositoryTest.java | 44 +++-
.../otp/service/OtpServiceImplTest.java | 122 ++++++----
.../RegistrationCommandServiceImplTest.java | 257 +++++++++++++++++++++
.../service/TransfersCommandServiceImplTest.java | 34 +--
.../service/UserCommandServiceImplTest.java | 23 +-
.../src/test/resources/features/password.feature | 18 ++
.../test/resources/features/registration.feature | 26 ++-
docs/consumer/architecture/infrastructure.adoc | 4 +-
docs/consumer/features/identity.adoc | 2 +-
docs/consumer/features/otp.adoc | 25 +-
docs/consumer/features/registration.adoc | 29 +--
frontend/public/i18n/en.json | 1 +
frontend/public/i18n/hi.json | 1 +
33 files changed, 1047 insertions(+), 196 deletions(-)