External services security

Moodle 2.0

Descriptions of security framework for web services, also used for RSS feeds, embedded application and similar parts that can not use normal HTTP cookies.

Current solutions

• user keys for gradebook import and export - see require_user_key_login() and db table user_private_key
• open RSS feeds - no security at all
• chat tokens
• calendar hash from user name, password and salt

See also

• Web services