Task/verify 2fa code

[whabanks]

Summary | Résumé

This PR adds a new page to verify a users mobile phone number from the Profile page. It also adds a flow for when the user tries wants to add SMS 2fa auth have not added a phone number to their profile yet:

Select SMS auth -> add their phone number -> enter verify code -> auth is changed to SMS

Related

• https://www.figma.com/design/T6gN6GxBubbXvAHGtgUxHl/Security-features?node-id=2363-2657&focus-id=2355-2089&m=dev

Test instructions | Instructions pour tester la modification

Throughout these flow's test the back links to ensure they move to pages that make sense given the context. Especially during the flow of change 2FA to SMS when you don't have an existing phone number already as there are multiple intertwined steps here.

Between the different verification states, keep your eye on the verification badges to ensure they properly reflect verified and unverified states in the UI.

Add new phone number verifies correctly

• 1. Remove existing phone numbers from your profile
• 2. Add a phone number to your profile & verify it (same flow)
• 3. Check your user in the DB and ensure that the verified_phonenumber field was set to True
• 4. Navigate to the Change 2FA method page and ensure that the verified badge is present.

Removing your phone number de-verifies

• 1. Remove the phone number that you just added
• 2. Check the DB and note that the verified_phonenumber column was set to False
• 3. Navigate to the Change 2FA method page and ensure that the un-verified badge is present.

Setting SMS 2FA without a Phone number

• 1. In the security section of the profile, click Change 2FA method
• 2. Select the SMS option, noting that the un-verified badge is present
• 4. Note that you're taken through the process of adding a phone number
• 5. Complete the process & verification
• 6. Check the DB, note that the verified_phonenumber field was set to True
• - Note that the auth_type column was set to sms_auth

Removing your phone number defaults auth type to email

• 1. Remove your phone number again
• 2. Check the DB and note that the verified_phonenumber column was set to False
• - Note that the auth_type column was set to email_auth

Auth type can be set to SMS with existing phone number

• 1. Add your phone number back in via the Your profile section, not the Security section and verify it.
• 2. Change your 2 step verification method from Email to SMS
• 5. Check the DB, note that the verified_phonenumber field was set to True
• - Note that the auth_type column was set to sms_auth

[github-actions]

🧪 Review environment

https://htjj75efjjcnza5kxm5ddcexfq0nuddz.lambda-url.ca-central-1.on.aws/

[jzbahrai]

Tested this, and it looks good, just a question about the flow plus catching an error when a user enters an old code. (discussed offline)