GoodDollar/GoodServer

Hash user private data in mongoprivatedb

Closed this issue · 0 comments

sirpy commented

After user mautic record is created we no longer need to keep user private data in plain text
don't keep mobile and email in plain text but as sha512 hash

As a preparation map places where we use data from privatedb so we verify changes will work

Defintion of Done

  • prepare map of private db data usage
  • user private data is kept in mongodb as hash
  • checking of existing email/mobile during registration uses hash
  • re-sending of emails requires api to supply email