Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Better synchronization between Django BioCapsule and OpenMRS #38

Open
sunbiz opened this issue May 13, 2020 · 1 comment
Open

Better synchronization between Django BioCapsule and OpenMRS #38

sunbiz opened this issue May 13, 2020 · 1 comment
Assignees
Milestone

Comments

@sunbiz
Copy link
Member

sunbiz commented May 13, 2020

Currently, the Django BioCapsule application updates the last_authenticated column in the dynaswap_users table. However, the matching probability is verified and response to the "authentication success" page is shown and it takes time to write to the last_authenticated column.

This makes it hard to authenticate OpenMRS with the same user as the BioCapsule user because we are currently having to use session validation. This might be open to a number of attacks, and it might be better to validate the user internally using the database column. Thus, before the "authentication success" page is shown, the database should be updated for the OpenMRS authentication to validate that the user is correctly authenticated.

@sunbiz
Copy link
Member Author

sunbiz commented May 22, 2020

Thanks, this is working well. We need changes to the OpenMRS transfer, which I am working on now.

@sunbiz sunbiz added this to the v1.5 milestone May 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants