Skip to content

Conversation

ChristianSoftwire
Copy link
Contributor

@ChristianSoftwire ChristianSoftwire commented Sep 24, 2025

What

Add AUTH_EMAIL_FRAUD_CHECK_DECISION_USED audit event and emit it when an experian check is used during

  • Create account
  • Update email

How to review

  1. Code Review
  2. Follow the following testing instructions
  • Deploy this branch to a dev env
  • Add a valid experian check to the email-check-result table
  • Try create an account with this email address
  • Poll the {env}-oidc-txma-audit-queue and check that you can see the AUTH_EMAIL_FRAUD_CHECK_DECISION_USED audit event
  • Do the same with update email and you should see the same result
  • Check the contents of the audit event are what you expect (use the event catalogue to check this)

@ChristianSoftwire ChristianSoftwire requested review from a team as code owners September 24, 2025 10:46
…kEmailFraudBlockHandler

- Add logic to send event if current journey ID is different from the journey ID in the cached result

Signed-off-by: Christian Sophocleous <[email protected]>
…pdateEmailHandler

Signed-off-by: Christian Sophocleous <[email protected]>
@ChristianSoftwire ChristianSoftwire force-pushed the AUT-4555-create-auth-email-fraud-check-decision-used-audit-event branch from b45bc98 to c95a3b6 Compare September 25, 2025 14:14
Copy link

),
new AuthEmailFraudCheckDecisionUsed.Extensions(
JourneyType.REGISTRATION.getValue(),
decision_reused ? emailCheckResult.getEmailCheckResponse() : null)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The value returned in getEmailCheckResponse will have a extensions and domain section. This will need extracting and putting in extensions.emailFraudCheckResponse and restricted.domain_name respectively as in the event catalogue. Appreciate the difficulty as we don't want to expose the values under emailFraudCheckResponse further here in this repo.

auditContext.sessionId()),
new AuthEmailFraudCheckDecisionUsed.Extensions(
JourneyType.REGISTRATION.getValue(),
decision_reused ? emailCheckResult.getEmailCheckResponse() : null));
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar comment as previous here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants