Development:External services security - Revision history

Mudrd8mz: Text replacement - "class="nicetable"" to "class="wikitable""

2021-07-14T13:24:05Z

Text replacement - "class="nicetable"" to "class="wikitable""

← Older revision		Revision as of 13:24, 14 July 2021
Line 53:		Line 53:
	Specifies which user may use each external service when restrictedusers flag set in service.		Specifies which user may use each external service when restrictedusers flag set in service.

	{\| class="~~nicetable~~"		{\| class="wikitable"
	! Field		! Field
	! Type		! Type
Line 122:		Line 122:
	Stores permanent tokens for cookieless access, script runs without real session. (Later might have to add emulated session for performance reasons.)		Stores permanent tokens for cookieless access, script runs without real session. (Later might have to add emulated session for performance reasons.)

	{\| class="~~nicetable~~"		{\| class="wikitable"
	! Field		! Field
	! Type		! Type

Jmouneyrac: /* Random all-time valid token */

2010-01-14T02:59:20Z

Random all-time valid token

← Older revision		Revision as of 02:59, 14 January 2010
Line 223:		Line 223:


	Administration: token management:<br/>		Administration: token management (valid until field is missing here):<br/>
	[[Image:Admin_token.png]]		[[Image:Admin_token.png]]

Jmouneyrac: /* Random all-time valid token */

2010-01-14T02:58:40Z

Random all-time valid token

← Older revision		Revision as of 02:58, 14 January 2010
Line 208:		Line 208:
	* A token cannot be linked to an administrator .		* A token cannot be linked to an administrator .
	* A Moodle user create his own token on his profil page.		* A Moodle user create his own token on his profil page.
	* To create a token, a user need "createtoken" capability. ~~(TBD: exact capability name)~~		* To create a token, a user need "moodle/webservice:createtoken" capability.
	* An administrator create token for other on a web service token page.		* An administrator create token for other on a web service token page.
	* An administrator cannot see token that he didn't create.		* An administrator cannot see token that he didn't create.
Line 217:		Line 217:
	* When the user create a token, he must select a service (to link the token to a service). Only services that the user has capability on are displayed.		* When the user create a token, he must select a service (to link the token to a service). Only services that the user has capability on are displayed.
	* ''ip restriction'' and ''valid until'' fields are optional.		* ''ip restriction'' and ''valid until'' fields are optional.
	* A Moodle user must select an aera on which the token can be valid (course, ...) - TBD - unclear yet		* A Moodle user must select an aera on which the token can be valid. (course, ...) - TBD - unclear yet
	* A user can only see token string if https is enabled		* A user can only see token string if https is enabled.
			* A token can be linked to only one service.

Jmouneyrac: /* Random all-time valid token */

2010-01-14T02:57:05Z

Random all-time valid token

← Older revision		Revision as of 02:57, 14 January 2010
Line 218:		Line 218:
	* ''ip restriction'' and ''valid until'' fields are optional.		* ''ip restriction'' and ''valid until'' fields are optional.
	* A Moodle user must select an aera on which the token can be valid (course, ...) - TBD - unclear yet		* A Moodle user must select an aera on which the token can be valid (course, ...) - TBD - unclear yet
			* A user can only see token string if https is enabled

Jmouneyrac: /* Random all-time valid token */

2010-01-14T02:55:47Z

Random all-time valid token

← Older revision		Revision as of 02:55, 14 January 2010
Line 204:		Line 204:
	'''Specificity'''		'''Specificity'''
	* A token can be created by a Moodle administrator (administration page) or a simple Moodle user (user profil).		* A token can be created by a Moodle administrator (administration page) or a simple Moodle user (user profil).
	* An administrator has the ability to create a token for another Moodle user but not for himself (for security purpose).		* An administrator has the ability to create a token for another Moodle user but not for himself neither for another administrator (for security purpose).
	* A token is always linked to a Moodle user.		* A token is always linked to a Moodle user.
	* A token cannot be linked to an administrator .		* A token cannot be linked to an administrator .

Jmouneyrac: /* Random all-time valid token */

2010-01-14T02:55:20Z

Random all-time valid token

← Older revision		Revision as of 02:55, 14 January 2010
Line 204:		Line 204:
	'''Specificity'''		'''Specificity'''
	* A token can be created by a Moodle administrator (administration page) or a simple Moodle user (user profil).		* A token can be created by a Moodle administrator (administration page) or a simple Moodle user (user profil).
	* An administrator has the ability to create a token for another Moodle user.		* An administrator has the ability to create a token for another Moodle user but not for himself (for security purpose).
	* A token is always linked to a Moodle user.		* A token is always linked to a Moodle user.
	* A token cannot be linked to an administrator .		* A token cannot be linked to an administrator .

Jmouneyrac: /* Random all-time valid token */

2010-01-11T08:51:58Z

Random all-time valid token

← Older revision		Revision as of 08:51, 11 January 2010
Line 211:		Line 211:
	* An administrator create token for other on a web service token page.		* An administrator create token for other on a web service token page.
	* An administrator cannot see token that he didn't create.		* An administrator cannot see token that he didn't create.
	* A token is generated randomly and is long enough. ~~(TBD)~~		* A token is generated randomly and is long enough.
	* A token can be used by an external web application. (by browser)		* A token can be used by an external web application. (by browser)
	* A token can be used by a mobile application. (i.e. iphone native application)		* A token can be used by a mobile application. (i.e. iphone native application)

Jmouneyrac: /* Random all-time valid token */

2010-01-06T03:14:08Z

Random all-time valid token

← Older revision		Revision as of 03:14, 6 January 2010
Line 220:		Line 220:


	~~[[Image:Admin_token.png]]<br/>~~
	~~Administration: token management~~

			Administration: token management:<br/>
			[[Image:Admin_token.png]]

	[[Image:Create_token.png]]~~<br/>~~
	~~Administration: create token~~		Administration: create token:<br/>
			[[Image:Create_token.png]]

	==Application embedding==		==Application embedding==

Jmouneyrac: /* Random all-time valid token */

2010-01-05T12:56:58Z

Random all-time valid token

← Older revision		Revision as of 12:56, 5 January 2010
Line 203:		Line 203:

	'''Specificity'''		'''Specificity'''
	* A token can be created by a Moodle administrator or a simple Moodle user.		* A token can be created by a Moodle administrator (administration page) or a simple Moodle user (user profil).
	* An administrator has the ability to create a token for another Moodle user.		* An administrator has the ability to create a token for another Moodle user.
	* A token is always linked to a Moodle user.		* A token is always linked to a Moodle user.

Jmouneyrac: /* Steps needed to configure general web service access */

2010-01-05T12:36:08Z

Steps needed to configure general web service access

← Older revision		Revision as of 12:36, 5 January 2010
Line 222:		Line 222:
	[[Image:Admin_token.png]]<br/>		[[Image:Admin_token.png]]<br/>
	Administration: token management		Administration: token management


	[[Image:Create_token.png]]<br/>		[[Image:Create_token.png]]<br/>