Closed Carifio24 closed 1 week ago
Something that we probably want is some way to verify that the request is coming from the educator in charge of the class - maybe pass some identifying tag for the educator in a header or something?
I don't think it's pressing since the API is not publicly usable (as we don't currently give out keys), but that may change someday.
This PR adds a simple
/classes/roster/<class ID>
endpoint that returns a list of all of the students in the specified class.