DASSL / Gradebook

Open-source product to provide a practical means for instructors to record student attendance and assessment
Other
8 stars 4 forks source link

Web Server /login and REST name updates #42

Closed wildtayne closed 7 years ago

wildtayne commented 7 years ago

This branch addresses two of the web server items for M1: REST call names:

/login call:

wildtayne commented 7 years ago

Thanks for the review. I think it's a good idea to open an issue on the node.js errors. I'll have to do some research to figure out what situations cause node.js to return an internal error. Ideally, I would want to translate any node.js errors into 500 errors, but I'm not sure if that facility exists. At the very least, such detailed information should not be sent to the client.

smurthys commented 7 years ago

BTW, I recommend changing the response string 401 - Login failed - Instructor does not exist to just 401 - Login failed This recommendation is to increase system security.

smurthys commented 7 years ago

Trim values extracted in function creareConnectionParams. Also trim Email on L130.

wildtayne commented 7 years ago

Thanks for the feedback. I've pushed a few commits to address these points. Each user-supplied field is now trimmed before use, and the 401 error message has been made less revealing.

smurthys commented 7 years ago

The changes look good.

afig commented 7 years ago

Latest changes look good.