VikeLabs / scheduler-back-end

Server for UVic scheduler project
https://uvic-scheduler-server.herokuapp.com/
GNU General Public License v3.0
1 stars 0 forks source link

Research a method to only allow the scraper to save course data #15

Closed kerfootj closed 4 years ago

kerfootj commented 4 years ago

User Story

As a developer, I want only the scraper to be able to make changes to course data.

Description

Conduct research to find a method to secure posting to /courses such that only requests made by the scraper will modify data.

Acceptance Criteria

kerfootj commented 4 years ago

Using the host name might be sufficient although not the most secure way. https://stackoverflow.com/questions/18498726/how-do-i-get-the-domain-originating-the-request-in-express-js

Gohsato commented 4 years ago

The scraper now directly uploads course data to mongodb.

Here's the work on the scraper side: https://github.com/VikeLabs/scheduler-scraper/pull/22 This PR removed the post endpoint on the backend: https://github.com/VikeLabs/scheduler-back-end/pull/19