Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DLS-10958 | Add personal tax enrolment check as part of nino authorisation #1090

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mahesh-hmrc
Copy link
Contributor

PR to address a security incident that has compromised some accounts. To address that, as part of HTS authentication

  • Validate that the user session nino has a corresponding personal tax enrolment
  • Validate that the user session nino matches to the nino from the personal tax enrolment

If any of the above validation steps fail, redirect the user to the personal tax endpoint.

johno1985
johno1985 previously approved these changes Sep 20, 2024
Copy link
Contributor

@johno1985 johno1985 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would love to know how exactly it happened.

@mahesh-hmrc mahesh-hmrc force-pushed the mmudi/DLS-10958/pt_entrolment_check branch 2 times, most recently from 3a308f3 to dd6e4bc Compare September 20, 2024 17:45
@mahesh-hmrc mahesh-hmrc force-pushed the mmudi/DLS-10958/pt_entrolment_check branch from dd6e4bc to 6685c62 Compare September 21, 2024 08:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants