apluslms / mooc-grader

Automatic assessment framework compatible with A-plus LMS.
14 stars 29 forks source link

Update aplus-auth to 0.2.0, add permission checks to views, add logging, fix custom template caching #126

Closed lainets closed 2 years ago

lainets commented 2 years ago

Description

What?

Update aplus-auth to 0.2.0, add permission checks to views, add logging, and fix custom template caching.

Why?

Shortens JWT lengths, and increases security. Security logging was required. Templates wouldn't be reloaded after they were changed.

How?

Respond with 403 if the course key is an integer (i.e. it is the remote id) and the user has no access. Logging on endpoints where there could be an effect to the course. Remove caching of courses' custom templates.

Testing

What type of test did you run?

Did you test the changes in

Programming style

Have you updated the README or other relevant documentation?

Is it Done?