Auto-login from Bb to KF
From AnalysisWiki
Some working assumptions:
- Bb will handle authentication and authorization; by the time the request gets issued we know it's valid
- if the userid exists, the user will be automatically logged into KF
- if the userid does not exist, the KF database will be populated with the appropriate information and then the user will be automatically logged into KF
- Question: how do we remove or deactivate a userid of a student who has left the course?
- because we elected to do auto-generation of user logins rather than bulk transfer from ROSI I would suggest the deactivation of accounts be done via the regular admin interface to KF.
The URL to accomplish auto-login will be:
http://analysis.ikit.org/bb/login?course=mycoursecode&username=myuserid&hash=myhash&timecode=longnumber
Where
coursecode is the ROSI-style course code (I don't know exactly what these look like, but they're something like CTL1600F07, I think),
myuserid is the UTORid of the participant, and
myhash is an MD5 hash of some stuff, likely to include course code, UTORid, and 42.
longnumber is a timestamp so that the urls expire
On success, the user will be redirected to the home view of the Knowledge Forum database. On failure, something bad will happen. Bb should therefore call this URL in a new (blank) browser page.
