Development:External services security
From MoodleDocs
Template:Moodle 2.0 Descriptions of security framework for web services, also used for RSS feeds, embedded application and similar parts that can not use normal HTTP cookies.
Current solutions
- user keys for gradebook import and export - see require_user_key_login() and db table user_private_key
- open RSS feeds - no security at all
- chat tokens
- calendar hash from user name, password and salt
