Need a way for a an admin to test if their twilio credentials are valid

[FireLemons]

What type(s) of user does this feature affect?

• admins

Description We need a way for an admin to test whether they entered their twilio credentials correctly by checking with twilio servers if the credentials entered are valid.

Screenshots of current behavior, if any

QA Login Details:
Link to QA site

Login Emails:

• [email protected] view site as a volunteer
• [email protected] view site as a supervisor
• [email protected] view site as an admin

password for all users: 12345678

Questions? Join Slack!

We highly recommend that you join us in slack https://rubyforgood.herokuapp.com/ #casa channel to ask questions quickly and hear about office hours (currently Tuesday 6-8pm Pacific), stakeholder news, and upcoming new issues.

[7riumph]

Doesn't seem like Twilio has a system to vet the credentials. I think attempting to send a live "credential confirmation" SMS, either to the admin or the admin's casa org Twilio number, may be the way to go.

[compwron]

Hmm sending live sms is not ideal, how about sending a "get past messages" instead of a "send sms"

[7riumph]

Oh that's true! Regardless of whether the account has a message history it should throw something that confirms the credentials work, more info here https://www.twilio.com/docs/sms/tutorials/how-to-retrieve-and-modify-message-history-ruby

[xihai01]

Maybe there is a way when we save the credentials, we can check whether or not the credentials are good and render an appropriate notice on the page? So we won't need to send anything and thus saving precious twilio credits? @7riumph @compwron

[xihai01]

I can look into this if you want

[amygurski]

I messed around with this idea a little bit, and it seems like it would work to use message history or usage. If the authentication fails on the call to the twilio api, it returns code 20003. Proof of concept something like:

require 'twilio-ruby'

TWILIO_AUTHENTICATE_ERROR_CODE = 20003 # Permission denied: https://www.twilio.com/docs/api/errors/20003

account_sid = 'theaccountsid'
auth_token = 'theauthtoken'

@client = Twilio::REST::Client.new(account_sid, auth_token)

begin
  # Make a call to the Twilio API to retrieve or list a resource
  # (Pretty sure these don't cost anything)

  @client.messages.list(limit: 1)
  # https://www.twilio.com/docs/sms/tutorials/how-to-retrieve-and-modify-message-history-ruby
  
  # alternatively - 
  @client.usage.records.this_month.list(limit: 1)
  # https://www.twilio.com/docs/usage/api/usage-record#list-get

  print("Authentication looks good")
rescue Twilio::REST::RestError => twilio_error
  if twilio_error.code == TWILIO_AUTHENTICATE_ERROR_CODE
    print("Twilio credentials invalid. Please double check and try again.")
  else
    print("Some other unknown twilio error")
  end
end

[kaysiz]

@FireLemons I can take a crack at this one, what should we do if the credentials are invalid? Should we delete and notify user or just display a message without removing the credentials.

[FireLemons]

display a message

[github-actions[bot]]

This issue has been inactive for 250 hours (10.42 days) and will be unassigned after 110 more hours (4.58 days). If you have questions, please visit the #casa channel in slack during Tuesdays 6-8 PM PST. Link: https://rubyforgood.herokuapp.com/

If you are still working on this, comment here to tell the bot to give you more time