Project

General

Profile

Actions
Copy link

Feature #92

open

[M1] User & Candidate Management — 85% complete

Added by Ayush Yadav on 08/17/2026 10:55 AM. Updated on 08/25/2026 06:34 AM.

Status:
New
Priority:
Normal
Assignee:
-
Start date:
08/17/2026
Due date:
% Done:

85%

Estimated time:

Description

Gantt progress snapshot (17 Aug 2026)

  • Module: M1 User & Candidate Management
  • Phase: Phase 1 MVP (W1–W4)
  • Percent complete: 39%
  • Percent remaining: 61%

Done in TeamTalks today

Email/password sign-in, Candidate2 stepper, email OTP, admin role updates, localStorage session.

Still to do

Mobile OTP, Google & Microsoft login, bulk candidate CSV/Excel upload, MFA, device binding, JWT/session lockdown (SecurityConfig is currently permitAll).

Source: AceZone_Assessment_Engine_Gantt_Chart.xlsx scored against the TeamTalks React + Spring Boot repo. Overall product is ~9% complete (~91% remaining). Phase 1 MVP is ~15% complete.

Actions
Copy link
 #1

Updated by Ayush Yadav on 08/24/2026 12:10 PM

  • % Done changed from 39 to 75

Phase 1 W14 catch-up shipped: session auth, tests/attempts, CBT autosave, server scoring, reports, Razorpay stub, descriptive scoring.

Actions
Copy link
 #2

Updated by Ayush Yadav on 08/25/2026 06:34 AM

  • Subject changed from [M1] User & Candidate Management — 39% complete to [M1] User & Candidate Management — 85% complete
  • % Done changed from 75 to 85

Progress update (25 Aug 2026)

  • Percent complete: 85%

Done

  • Email/password sign-in, Candidate2 stepper, email and mobile OTP, password reset
  • MFA challenge (OTP) when mfaEnabled
  • Admin user search, roles, ban/unban, bulk CSV/Excel candidate upload, login audit
  • SessionAuthFilter — mutating APIs need an ACTIVE login session (GET still public)
  • Default Super Admin kingayush2001@gmail.com seeded and locked (cannot demote/ban/change email)

Still to do

Google & Microsoft SSO, device binding, JWT (explicitly not used — session token instead).

Actions
Copy link

Also available in: Atom PDF