Uploaded image for project: 'Moodle app'
  1. Moodle app
  2. MOBILE-3164

Stop using WS tokens to retrieve images. Use tokenpluginfile.php instead.

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.7.1
    • Fix Version/s: 3.8.0
    • Component/s: Security
    • Labels:
    • Testing Instructions:
      Hide

      This issue should be tested both in Android and iOS.

      Test update

      1. Install a version of the app without this patch in the device.
      2. Login in a master site and navigate the app. Make sure at least 1 file is downloaded (go offline, restart the app and check that the file is loaded/opened).
      3. Now update the app, using a build with this patch applied.
      4. In offline, open the app and check that the downloaded files are still loaded.

      Test new site

      1. Install a build with this patch applied.
      2. Add a new site. Make sure it's a master site.
      3. Navigate the app. Check that files are successfully downloaded. Unfortunately there's no easy way to check if tokenpluginfile is being used, we'll have to assume it is.
      Show
      This issue should be tested both in Android and iOS. Test update Install a version of the app without this patch in the device. Login in a master site and navigate the app. Make sure at least 1 file is downloaded (go offline, restart the app and check that the file is loaded/opened). Now update the app, using a build with this patch applied. In offline, open the app and check that the downloaded files are still loaded. Test new site Install a build with this patch applied. Add a new site. Make sure it's a master site. Navigate the app. Check that files are successfully downloaded. Unfortunately there's no easy way to check if tokenpluginfile is being used, we'll have to assume it is.
    • Affected Branches:
      MOODLE_37_STABLE
    • Fixed Branches:
      MOODLE_38_STABLE
    • Sprint:
      Moodle App 3.8.0

      Description

      As indicated in MDL-66376 this will enforce security

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              dpalou Dani Palou
              Reporter:
              jleyva Juan Leyva
              Peer reviewer:
              Pau Ferrer
              Integrator:
              Juan Leyva
              Tester:
              Noel De Martin
              Participants:
              Component watchers:
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                20/Dec/19