ross/penracourses
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: enhance exam answer submission security and add tests for user authentication

Browse Source
This commit is contained in:
Ross
2026-07-05 21:59:02 +01:00
parent bb6b4c625c
commit 2744758aa8
4 changed files with 212 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
todo
+4 -17
View File
@@ -1,21 +1,8 @@
RTS: we should show a refresh button for each of the exam/packet sections (as well as a global refresh that refreshes all)
When editing / viewing a case in the atlas it is currently possible to associate resources that have already been created. it should also be possible to create and attach the resource inline.
We need to update RTS have consistent logging that can be enabled and disabled via both the gui and url parameters. All current log statements need to be set with an appropriate level.
When editing a case as part of a casecollection we should redirect back to the case as part of the casecollection when it is saved / cancelled.
RTS currently supports user login in addition to the cid / passcode however this is not particuarly well implemented and is not secure (if someone knows a users user id they can submit results for that user). this needs to be fixed with a more robust implementation.
We need to optimise the case series update view. This currently hangs on the production site (likely due to the large number of series).
In RTS we need to tidy up the resuming of exams that have already been started.
Running the docker local-up script does not always shut down the currently running containsers:
(rad) ⋊> ~/p/rad on master ⨯ ./scripts/local-up.sh -n 23:07:18
Starting compose with COMPOSE_ENV=dev (using .env.dev)
Ensuring loki and logs folders exist under /home/ross/penracourses/rad/docker and /home/ross/penracourses/rad/logs
Attempting to chown loki folders to UID 10001 (may prompt for sudo password)
[sudo] password for ross:
[+] Running 5/5
✔ Container docker-nginx-1 Stopped 0.2s
✔ Container docker-worker-1 Stopped 0.5s
✔ Container docker-web-1 Stopped 10.3s
✔ Container docker-redis-1 Stopped 0.2s
✔ Network docker_default Removed 0.0s
Error response from daemon: error while removing network: network docker_default has active endpoints (name:"docker-cache-1" id:"4650361118ce", name:"docker-db-1" id:"2a82b22517d0")
In RTS we need to improve the fallback that is shown if we fail to manually submit an exam via the finish button.