You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The procedure of login authentication is as follows.
The user types in login code.
Perform get request with login code query.
Returns an object including School ID if the code is correct, or error message.
In order to re-login without typing the code again, there are two options with current server.
Stores plain login code on the device and use it whenever the app is launched.
(security problem : whoever is able to access the device can retrieve the plain code.)
(Since the user has to send plain text, storing hashed code won't work.)
Stores the returned status when the code is correct.
(This causes a problem when the code is changed. Once any user logged in the app, they are able to log in forever even though the code is changed on the server.)
The app is implemented with option 1 temporarily, but it has to be resolved for the security reason.
The text was updated successfully, but these errors were encountered:
The procedure of login authentication is as follows.
In order to re-login without typing the code again, there are two options with current server.
(security problem : whoever is able to access the device can retrieve the plain code.)
(Since the user has to send plain text, storing hashed code won't work.)
(This causes a problem when the code is changed. Once any user logged in the app, they are able to log in forever even though the code is changed on the server.)
The app is implemented with option 1 temporarily, but it has to be resolved for the security reason.
The text was updated successfully, but these errors were encountered: