Closed wildtayne closed 7 years ago
Thanks for the review. I think it's a good idea to open an issue on the node.js errors. I'll have to do some research to figure out what situations cause node.js to return an internal error. Ideally, I would want to translate any node.js errors into 500 errors, but I'm not sure if that facility exists. At the very least, such detailed information should not be sent to the client.
BTW, I recommend changing the response string 401 - Login failed - Instructor does not exist
to just 401 - Login failed
This recommendation is to increase system security.
Trim values extracted in function creareConnectionParams
. Also trim Email on L130.
Thanks for the feedback. I've pushed a few commits to address these points. Each user-supplied field is now trimmed before use, and the 401 error message has been made less revealing.
The changes look good.
Latest changes look good.
This branch addresses two of the web server items for M1: REST call names:
/attendance
and/login
have been not been changed/login
call:instructoremail
Login failed - Instructor does not exist
"