Difference between revisions of "Interfaces"

From TempusServa wiki
Jump to navigation Jump to search
old>Admin
old>Admin
Line 22: Line 22:
* '''Token expiry''': Maximum allowed age of the token
* '''Token expiry''': Maximum allowed age of the token


=== Update / insert options ===
=== Interface options ===
 
Control what happens after an update or insert operation
* '''Succes message''': Displayed message (if not using questionaire interface)  
* '''Succes message''': Displayed message (if not using questionaire interface)  
* '''Failure message''': Displayed message (if not using questionaire interface)  
* '''Failure message''': Displayed message (if not using questionaire interface)  
* '''Redirect''': URL to send user to after updating/inserting their data
* '''Redirect''': URL to send user to after updating/inserting their data


=== General options ===
Extra security features
* '''CAPTCHA''': User must take human test before using the interface (prevents robots from injecting data)
* '''CAPTCHA''': User must take human test before using the interface (prevents robots from injecting data)
* '''IP filter''': Specificy which IP's are allowed to use the interface (prevent users from known problem countries)
* '''IP filter''': Specificy which IP's are allowed to use the interface (prevent users from known problem countries)

Revision as of 11:07, 21 November 2013

Interfaces are access points for external users (someone using the system without a login).

An interface has the following configuration options

  • Interface URL
    • Unique name of the service
  • How should the interface behave
    • Wrapper
    • Template
    • Stylesheet
    • Language
  • What is the external user allowed to do
    • Proxy user profile
    • Allow UPDATE
    • Allow INSERT

Using email tokens for access

A common usage is sending email tokens to external users.

Tokens will allow a certain user to update the content of a certain record. Usually these are tied together, where the email of the user is a field in the record.

Tokens contain a timestamp, so it is possible to invalidate the token after a specified amount of time

  • Token expiry: Maximum allowed age of the token

Interface options

Control what happens after an update or insert operation

  • Succes message: Displayed message (if not using questionaire interface)
  • Failure message: Displayed message (if not using questionaire interface)
  • Redirect: URL to send user to after updating/inserting their data

Extra security features

  • CAPTCHA: User must take human test before using the interface (prevents robots from injecting data)
  • IP filter: Specificy which IP's are allowed to use the interface (prevent users from known problem countries)