Add Security Layer To Portal Login

Summary
Client
Assigned To
Akash Joshi
Status
Completed
Start & Finish Date
Needs Review
icon
Project Resources

No Resources Currently

Project Outline

icon
Project Planning Tasklist
Go through
For each Goal outlined turn it individual item in
icon
Problems & Goals

What are the problems we hope to solve with this project?

  • Anyone with a clients email can login and see their new application status or onboarding progress.
  • Don’t identify any very sensitive information that is accessible
  • Security measure should be easy for users to clear but difficult for hackers/unauthorized users

What are the Goals to create in order to solve the problems?

  • Easy way to login to portal without setting up any password
  • Block direct link to internal pages if not logged in

Goals & Deliverables

icon
Goal #1

Easy way to login to portal without setting up any password

Goal Planning Tasklist

Outline Deliverables associated with Goal
Outline & complete any Tasklist - Research / Outline / Client Question
Create list of Tasks to achieve goal
Confirm Goal & Deliverables with client, get any questions answered
Turn goal deliverables into TasksTasks , add task details

Deliverables

  • Ability to login to portal with Magic link sent via Email
  • Portal dashboard secured behind a login screen accessible only after authorized login

Tasklist - Research / Outline / Client Question

  • Find out the services that offer Magic link services
  • Create demo of the services to choose the one easy to manage in long run

Tasklist - Final

‣
(5 hours ) Setup and integrate the Magic link service in the existing login page
‣
(3 hour ) Create a token for the email that was verified and save in the browser’s storage
‣
(2 hour ) Update the portal to get a user’s info from Google sheet only if user is logged in
‣
(1 hours ) Redirect portal’s internal pages to login screen if user is not logged in
‣
(2 hours ) Create a setting’s page in WordPress dashboard to save the Magic link service’s API keys
‣
(3 hours ) Create a logout system for this new service to be able to change accounts