Changes proposed in this Pull Request
This PR sets the groundwork for a new Security Checkup feature (described here), which is currently set up behind the security/security-checkup feature flag, which is limited to dev environments for now.
The goal is to show a quick overview of a user’s security and account recovery settings. For now, this initial PR does not represent a wrapped product, but a basic skeleton to support further iteration.
At present, this PR includes the following items:
- Create
SecurityCheckupComponent with basic styling and wire it into the security nav
- Wire in the following links and basic assessments:
- Account email
- 2FA configuration
- Recovery email
- Recovery phone/SMS number
- Connected apps
Open issues
I’ll address these in subsequent iterations/PRs.
- The security nav is now using a dropdown instead of a tab-like view due to the additional menu item
- The wording almost certainly needs additional love/attention
- Maybe add in a row for password details — not quite sure what ought to go in here
- Add in a row for social logins
- Consider using different/better icons, possibly with colours – I just picked some existing icons as a starting point
- Clean up the use of
userSettings and the 2FA logic, including expanding the assessment to include backup codes
- General event tracking/logging
- Most bugs! 😁 I suspect there are some with the 2FA handling, as that seemed the most likely to be buggy.
Side note: A huge 🎩 to @fditrapani! I cribbed his designs for the new domain settings UI for the basic layout, as the core UX in the two screens is very similar.
Testing instructions
- Verify that the feature flag is working and does not expose the new UI when not in a dev environment.
- With the feature flag on, verify that the following work:
- All of the rows render correct information and an appropriate icon
- Clicking on each row navigates to the correct target UI
Relates to #26874, though it doesn’t directly address all of the items in the issue yet.
Unfortunately, no screenshots were provided by the developer.
