Table of Contents

Namespace SEBT.Portal.Core.Utilities

Classes

ClaimsPrincipalExtensions

Extension methods for reading portal-specific values from System.Security.Claims.ClaimsPrincipal.

DocVerificationOffboardingReasons

Off-boarding reason query-param values for document verification failures. Distinct values support analytics segmentation on the off-boarding route.

EmailNormalizer

Utility class for normalizing email addresses to ensure consistent storage and comparison.

HouseholdPiiFilter

Applies a PiiVisibility to a HouseholdData, masking fields the user is not authorized to see. Exposed as a shared utility so the use-case layer can re-apply visibility once it has loaded the household and can resolve per-case-type requirements against real cases.

IdentifierNormalizer

Utility class for normalizing identifier values to ensure consistent storage and comparison. Strips dashes and spaces to produce a canonical form.

OidcLogSanitizer

Truncates and strips control characters from OIDC error strings before logging. IdP error_description values may be long URL-encoded JSON blobs.

PiiMasker

Utility class for partially masking PII fields (email, phone, address) so users can recognize their data without exposing full details.

PreSocureHouseholdWarehouseIal

DC GetHouseholdByGuardian only returns email-linked rows when @isIdentityProofed = 1 (plugin maps that to IAL1plus). Users mid ID-proofing are often IAL1 (OTP); claims can transiently lag as None. For server-side Socure orchestration the portal loads the household keyed to the authenticated login email and does not return that payload to the client, so when the deployment requires a qualifying household we always use IAL1plus for that warehouse read.

SocureDocvEgregiousReasonCodes

Shared logic for Socure DocV egregious-reason immediate rejection.