feat(admin-form): support nric masking

[kevin9foong]

Problem

Support Nric masking for e-voting.
Closes FRM-1736

Solution

Implement functionality and components as required.

Features:

Unit testing

• backend unit tests in src/app/modules/submission/encrypt-submission/__tests__/encrypt-submission.controller.spec.ts & src/app/modules/submission/email-submission/__tests__/email-submission.controller.spec.ts are written. these TC cover the nric mask enabled case and nric mask disabled case.

Breaking Changes

• No - this PR is backwards compatible

Features:

• mask nric
• frontend changes based on design master figma

Improvements:

• refactoring of code (removing usememo, making code terse)

Before & After Screenshots

Admin POV

Component	Before	After
Singpass Auth Settings when toggle off	radio options directly in settings auth page, old toast message	singpass auth turned off, further settings hidden.
Singpass Auth Settings when toggle on	See above image	turn on and select singpass auth method + nric masking enabled
Disabled toggles		when form is open, admin cannot edit any singpass settings when myinfo fields are added, nric masking is enabled but singpass auth settings are disabled.
Form builder wizard		admin sees that sample NRIC is masked when nric toggle is on
NRIC masking screens
Storage mode masking
email mode masking
webhook masking		Does not mask the myinfo data, nric data is masked

Respondent POV

Component	Before	After
PublicForm		respondent sees masked nric is applied

Tests

Test email mode nric should be masked when nric mask toggle is on:

• create an email mode form
• ensure the form builder initially shows unmasked sample nric (S1234567A)
• go to the singpass tab, turn on the enable singpass auth toggle, select any one of the singpass auth methods
• toggle on nric masking
• ensure the form builder shows sample masked nric (****567A)
• open the form to public submission (in general settings tab)
• respond to the form
• check form response in email mailbox, verify the nric is masked
• turn off the nric masking
• make another form response
• check form response in email mailbox, verify nric is not masked

Test storage mode nric should be masked when nric mask toggle is on + myinfo fields are not masked despite nric masking enabled + settings auth options are correctly disabled/enabled based on form state:

• create a storage mode form
• ensure the form builder initially shows unmasked sample nric (S1234567A)
• go to the singpass tab, turn on the enable singpass auth toggle, select sgid-myinfo
• toggle on nric masking
• ensure the form builder shows sample masked nric (****567A)
• add any 2 myinfo field to form (eg, name and country)
• open the form to public submission (in general settings tab)
• respond to the form
• check form responses in admin panel, verify the nric is masked and the myinfo fields are not masked
• make form private
• ensure that the nric masking toggle can be turned off but radio button is disabled (due to presence of myinfo fields)
• turn off the nric masking
• make another form response
• check form response in admin panel, verify nric is not masked

[linear]

FRM-1736 NRIC Partial Masking

[kevin9foong]

The core functionality is complete

• masking (done at the backend at forms GET and submissions POST), toggle button, duplication

Remaining works are:

• code quality improvement/refactoring of the code
• discussion on whether frontend masking at the PublicFormProvider is needed
• making the setting UI page reflect the design docs (& implementing the new toggle for the singpass auth)
• writing tests

[kevin9foong]

Ready for final review. pending design approval on chromatic

[KenLSM]

LGTM! Thanks @kevin9foong !