Update aplus-auth to 0.2.0, add permission checks to views, add logging, and fix custom template caching.
Why?
Shortens JWT lengths, and increases security.
Security logging was required.
Templates wouldn't be reloaded after they were changed.
How?
Respond with 403 if the course key is an integer (i.e. it is the remote id) and the user has no access.
Logging on endpoints where there could be an effect to the course.
Remove caching of courses' custom templates.
Description
What?
Update aplus-auth to 0.2.0, add permission checks to views, add logging, and fix custom template caching.
Why?
Shortens JWT lengths, and increases security. Security logging was required. Templates wouldn't be reloaded after they were changed.
How?
Respond with 403 if the course key is an integer (i.e. it is the remote id) and the user has no access. Logging on endpoints where there could be an effect to the course. Remove caching of courses' custom templates.
Testing
What type of test did you run?
Did you test the changes in
Programming style
Have you updated the README or other relevant documentation?
Is it Done?