Conversation
Add user stories
documentation/API_documentation/NumberVerificationdevice_phone_number_User_Story.md
Outdated
Show resolved
Hide resolved
…_number_User_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
|
|
||
| | **Item** | **Details** | | ||
| | ---- | ------- | | ||
| | ***Summary*** | As an enterprise application developer, I want to verify the phone number associated with the line from which the call was made, so that I can ensure that I avoid identity theft fraud. | |
There was a problem hiding this comment.
To align with SMS OTP definition:
As an enterprise application developer, I want to verify the phone number associated with the line from which the call was made, so I can get a proof of possession of the phone number.
| | ---- | ------- | | ||
| | ***Summary*** | As an enterprise application developer, I want to verify the phone number associated with the line from which the call was made, so that I can ensure that I avoid identity theft fraud. | | ||
| | ***Roles, Actors and Scope*** | **Roles:** Customer:User, Customer:BusinessManager, Customer:Administrator<br> **Actors:** Application service providers, hyperscalers, application developers, end users. <br> **Scope:** <br> - Verifies if the specified phone number (plain text or hashed format) matches the one that the user is currently using. | | ||
| | ***Pre-conditions*** |The preconditions are listed below:<br><ol><li>The Customer:BusinessManager and Customer:Administrator have been onboarded to the CSP's API platform.</li><li>The Customer:BusinessManager has successfully subscribed to the Number Verification product from the product catalog.</li><li>The Customer:Administrator has onboarded the Customer:User to the platform.</li><li>The Customer:user performs an authorization request to CSP</li><li>The means to get the access token are known to the Customer:User to ensure secure access of the API.| |
There was a problem hiding this comment.
The means to get the access token are known to the Customer:User to ensure secure access of the API.
--> Access token generation initiated by Customer:User is based on network authentication to ensure secure access of the API
There was a problem hiding this comment.
I have reworked the sentence and add one step.
| | ***Summary*** | As an enterprise application developer, I want to verify the phone number associated with the line from which the call was made, so that I can ensure that I avoid identity theft fraud. | | ||
| | ***Roles, Actors and Scope*** | **Roles:** Customer:User, Customer:BusinessManager, Customer:Administrator<br> **Actors:** Application service providers, hyperscalers, application developers, end users. <br> **Scope:** <br> - Verifies if the specified phone number (plain text or hashed format) matches the one that the user is currently using. | | ||
| | ***Pre-conditions*** |The preconditions are listed below:<br><ol><li>The Customer:BusinessManager and Customer:Administrator have been onboarded to the CSP's API platform.</li><li>The Customer:BusinessManager has successfully subscribed to the Number Verification product from the product catalog.</li><li>The Customer:Administrator has onboarded the Customer:User to the platform.</li><li>The Customer:user performs an authorization request to CSP</li><li>The means to get the access token are known to the Customer:User to ensure secure access of the API.| | ||
| | ***Activities/Steps*** | **Starts when:** The customer application makes a POST verify via the number verification API providing in the request the phone number keyed by the user on the application. This input could be hashed or plain.<br>**Ends when:** The Number verification server answers if the phone number provided corresponds to the one of the line from which the request was triggered. | |
There was a problem hiding this comment.
the phone number keyed by the user on the application
--> the phone number provided by the end user in the application
| | ---- | ------- | | ||
| | ***Summary*** | As an enterprise application developer, I want to retrieve the phone number associated with the line from which the call was made, so that I can ensure that I obtain the correct phone number and avoid identity theft fraud. | | ||
| | ***Roles, Actors and Scope*** | **Roles:** Customer:User, Customer:BusinessManager, Customer:Administrator<br> **Actors:** Application service providers, hyperscalers, application developers, end users. <br> **Scope:** <br>-Returns the phone number associated with the access token so API clients can get the number and verify it themselves. | | ||
| | ***Pre-conditions*** |The preconditions are listed below:<br><ol><li>The Customer:BusinessManager and Customer:Administrator have been onboarded to the CSP's API platform.</li><li>The Customer:BusinessManager has successfully subscribed to the Number Verification product from the product catalog.</li><li>The Customer:Administrator has onboarded the Customer:User to the platform.</li><li>The Customer:user performs an authorization request to CSP</li><li>The means to get the access token are known to the Customer:User to ensure secure access of the API.| |
There was a problem hiding this comment.
The means to get the access token are known to the Customer:User to ensure secure access of the API.
--> Access token generation initiated by Customer:User is based on network authentication to ensure secure access of the API
Update NumberVerification_verify_User_Story following Jorge comments
|
Thanks @jgarciahospital - I've took into consideration your comment. |
AxelNennker
left a comment
There was a problem hiding this comment.
Please explain CSP once introducing that term.
Must this text mention network authentication? The customer does not care about the technical means, I think.
documentation/API_documentation/NumberVerification_verify_User_Story.md
Outdated
Show resolved
Hide resolved
documentation/API_documentation/NumberVerification_verify_User_Story.md
Outdated
Show resolved
Hide resolved
AxelNennker
left a comment
There was a problem hiding this comment.
I would not use the word "line" if we can avoid it.
documentation/API_documentation/NumberVerificationdevice_phone_number_User_Story.md
Outdated
Show resolved
Hide resolved
documentation/API_documentation/NumberVerificationdevice_phone_number_User_Story.md
Outdated
Show resolved
Hide resolved
documentation/API_documentation/NumberVerificationdevice_phone_number_User_Story.md
Outdated
Show resolved
Hide resolved
documentation/API_documentation/NumberVerificationdevice_phone_number_User_Story.md
Outdated
Show resolved
Hide resolved
…_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
…_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
…_number_User_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
…_number_User_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
…_number_User_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
…_number_User_Story.md Co-authored-by: Axel Nennker <axel.nennker@telekom.de>
Fixed ! |
Thanks @AxelNennker for the review. Added CSP in actor. |
What type of PR is this?
What this PR does / why we need it:
Document user stories as it is a mandatory piece to target stable maturity level.
Which issue(s) this PR fixes:
Fixes #117
Special notes for reviewers:
Changelog input
Additional documentation
This section can be blank.