Difference between revisions of "Interfaces"
Jump to navigation
Jump to search
old>Admin |
old>Admin |
||
Line 22: | Line 22: | ||
* '''Token expiry''': Maximum allowed age of the token | * '''Token expiry''': Maximum allowed age of the token | ||
=== | === Interface options === | ||
Control what happens after an update or insert operation | |||
* '''Succes message''': Displayed message (if not using questionaire interface) | * '''Succes message''': Displayed message (if not using questionaire interface) | ||
* '''Failure message''': Displayed message (if not using questionaire interface) | * '''Failure message''': Displayed message (if not using questionaire interface) | ||
* '''Redirect''': URL to send user to after updating/inserting their data | * '''Redirect''': URL to send user to after updating/inserting their data | ||
Extra security features | |||
* '''CAPTCHA''': User must take human test before using the interface (prevents robots from injecting data) | * '''CAPTCHA''': User must take human test before using the interface (prevents robots from injecting data) | ||
* '''IP filter''': Specificy which IP's are allowed to use the interface (prevent users from known problem countries) | * '''IP filter''': Specificy which IP's are allowed to use the interface (prevent users from known problem countries) |
Revision as of 11:07, 21 November 2013
Interfaces are access points for external users (someone using the system without a login).
An interface has the following configuration options
- Interface URL
- Unique name of the service
- How should the interface behave
- Wrapper
- Template
- Stylesheet
- Language
- What is the external user allowed to do
- Proxy user profile
- Allow UPDATE
- Allow INSERT
Using email tokens for access
A common usage is sending email tokens to external users.
Tokens will allow a certain user to update the content of a certain record. Usually these are tied together, where the email of the user is a field in the record.
Tokens contain a timestamp, so it is possible to invalidate the token after a specified amount of time
- Token expiry: Maximum allowed age of the token
Interface options
Control what happens after an update or insert operation
- Succes message: Displayed message (if not using questionaire interface)
- Failure message: Displayed message (if not using questionaire interface)
- Redirect: URL to send user to after updating/inserting their data
Extra security features
- CAPTCHA: User must take human test before using the interface (prevents robots from injecting data)
- IP filter: Specificy which IP's are allowed to use the interface (prevent users from known problem countries)