Gurbop / CSPBlog2

MIT License
0 stars 0 forks source link

CSP Spot Check #1

Open Gurbop opened 5 months ago

Gurbop commented 5 months ago

database, with database schema change:

Show db.Column changes you have made to model/python file in Visual Studio Code Screenshot 2024-02-01 10 14 20 AM Show initialization data code in VSCode Screenshot 2024-02-01 2 21 50 PM Demo delete database and run ./migrate.sh Demo corresponding schema change in SQLite3 Screenshot 2024-02-01 10 16 22 AM Demo initialization data captured in Column in SQLite3 Screenshot 2024-02-01 10 16 22 AM

postman with /authentication screen:

Show /authenticate endpoint code in Visual Studio Code Screenshot 2024-02-01 10 57 11 AM Show and Demo /authenticate in Postman… Screenshot 2024-02-01 10 58 38 AM Demo calling to endpoint Screenshot 2024-02-01 10 58 38 AM Show JSON data passed in call Screenshot 2024-02-01 10 58 38 AM Show Response window Screenshot 2024-02-01 10 58 38 AM Show Cookie acquired window Screenshot 2024-02-01 11 03 39 AM Cut/Copy/Paste Cookie into jwt.io and show decrypting payload Screenshot 2024-02-01 11 07 51 AM postman with /api screen to access data under authentication:

Show /api CRUD code in Visual Studio Code, expecting READ/GET code Screenshot 2024-02-01 11 24 24 AM Show and Demo /api READ/GET endpoint in Postman… Screenshot 2024-02-01 11 11 12 AM Demo calling to endpoint that requires Cookie Screenshot 2024-02-01 11 11 12 AM Show Response/Data Screenshot 2024-02-01 11 11 12 AM Demo Deleting cookie Screenshot 2024-02-01 11 13 35 AM Demo calling endpoint again Screenshot 2024-02-01 11 14 26 AM Show Response/Failure Screenshot 2024-02-01 11 14 26 AM

jm1021 commented 5 months ago

Initialization showing frontend is totally confusing on database part. Postman parts look correct, but they do not give me confidence that you understand what is behind the scenes.