ursbraem / kursausschreibung Goto Github PK

While settings.js and appConfig.js are still in place, can we override them with inline JS on different pages?

If working with more than a downloaded build, it can be confusing when the settings and appConfig are versioned.

I have excluded them in https://github.com/ursbraem/kursausschreibung/tree/feature/ignore_configs and put example data there instead

https://github.com/erz-mba-fbi/kursausschreibung/blob/master/app/templates/components/event-list-item.hbs

We want to allow different lists than only by HostId.
Most importanty, lists filtered by EventCategoryIds.

Or, in German:

Im Moment ist es nur möglich, nach der HostId (Veranstalter) zu filtern, das werden die obigen Begriffe sein wie Kurs WB Zebra.
Wir möchten aber mindestens nach "EventCategory" (Kategorie) filtern können, damit ihr – nur als Beispiel – eine Liste mit allen Sprachkursen (EventCategory 1023) auf einer Seite anzeigen könnt.

We will use the plugin in many different forms on various pages.
But the authentication is for one URL only. ERZ can't add all pages' URLs to their auth list.
So they recommended we disable autologin completely in appConfig.js

// set this to true if you want to use autologin on your page
"useAutoLogin": false,

If we would use the auto login with the domain only, then there would be a redirect to ` "webBaseUrl": "https://evento.stubr-dev.ch". I still don't really understand why the redirect is needed,

What I do understand is that it's a security issue to authenticate via JS, because JS can't keep a secret.

The recommendation is that we get the token ourselves via PHP (oAuth) and send it to the browser. As long as the token is valid, it's fine, it doesn't have to be recreated at each visit.

We have to see if this works with Litespeed Cache, which would be a pity if we couldn't use it.

The token is in LocalStorage:

In some slugs, there will be whitespace and thus sometimes %20 signs:

http://www.bffbern.ch/de/weiterbildung_erziehung_und_soziales_kurse_und_zertifikatslehrgaenge_info#/weiterbildung/kurs%20wb%20erziehung%2Fsoziales

https://www.bzemme.ch/kurseweiterbildung/#/weiterbildung/informatik%20(wb)

• On one hand, maybe the URL should be created more robustly, with UIDs?
• On the other hand, this maybe the whitespace can be replaced with a _?