cca.git - [WIP] Co-curricular activities selection site (computer science internal assessment)

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	index.tmpl: Place the search bar inside the table	Runxi Yu	2024-09-08	1	-3/+5
\|
*	*: Password login stub	Runxi Yu	2024-09-08	1	-1/+36
\|
*	index.tmpl: Rename the "Course" field into "Name", in the HTML	Runxi Yu	2024-09-08	1	-1/+1
\|
*	index.tmpl: Add .coursecheckbox to checkboxes	Runxi Yu	2024-09-08	1	-1/+1
\|
*	index.tmpl: Search bar	Runxi Yu	2024-09-08	1	-3/+18
\|
*	index.tmpl: Checkbox should not have {{.Id}} as text	Runxi Yu	2024-09-08	1	-1/+1
\|
*	*: Display courses	Runxi Yu	2024-09-08	1	-34/+38
\|
*	*: Basic WebSocket connection may be established now	Runxi Yu	2024-09-08	1	-1/+39
\|
*	index.tmpl: JavaScript warning	Runxi Yu	2024-09-08	1	-1/+23
\|
*	*: Call Graph API for department information	Runxi Yu	2024-09-07	1	-62/+5
\| \| \| \| \| \| \| \| \| \| \| \|	I am using a hybrid flow with "id_token" for OpenID Connect and "code" for an Authorization Code. I would use "token" too but that doesn't seem to be supported for standard web-apps and could result in strange session-hijacking issues. We still need PKCE sometime in the future; however it's not a priority: the worst attack someone could pull off is to use a different user's Authorization Code and steal a Department, which probably isn't too big of a deal as the Authorization Code should be secret anyways.
*	*: Basic authentication and templates	Runxi Yu	2024-09-07	2	-0/+158
	These are imported from FBFP and slightly modified to be specific to YKPS (while not being hard to port to other environments that use APIs that use OAUTH 2.0). Some code is also simplified. Database code still needs an audit, and things are not tested yet.