On 07/17/2015 02:35 PM, Felarca, Mario Marcaida wrote: > >> Hi, >> are you aware that Lengyue NCSA's credentials are hardcoded in those files? >> Anyone can login as him right now... > > Thanks for catching that, Kacper. We will rectify it now as well. I looked at that application briefly. As far as I can tell you have a js app that spawns python shell to execute script that uses cmdline arguments to wrap around novaclient, which is yet another wrapper around native OpenStack API. Wouldn't it be simpler to just call OpenStack API directly via e.g. jQuery? There's no obligation to use Python along the way. BTW, you can also authenticate user once to generate token, which then can be reused for each API call. Cheers, Kacper > Mario- > > >> >> Cheers, >> Kacper >> >> >> >>> From: owner-discuss@xxxxxxxxxxxxxxxxxxxxxxx >>> [mailto:owner-discuss@xxxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Lengyue >>> Chen >>> Sent: Friday, July 17, 2015 12:52 PM >>> To: discuss@xxxxxxxxxxxxxxxxxxxxxxx >>> Subject: REST API of create_lab, suspend_lab, resume_lab, delete_lab >>> in place >>> >>> Hi all >>> I have pushed the source code of create_lab, suspend_lab, resume_lab, >>> delete_lab API to the repository: >>> https://bitbucket.org/nds-org/nds-webservice/branch/nds-27-implement- >> c >>> reate-rest- >> endpoint?head=16023b516887ce760cafc42e165b571d25ff2756<http >>> s://urldefense.proofpoint.com/v2/url?u=https-3A__bitbucket.org_nds- >> 2Do >>> rg_nds-2Dwebservice_branch_nds-2D27-2Dimplement-2Dcreate-2Drest- >> 2Dendp >>> oint-3Fhead- >> 3D16023b516887ce760cafc42e165b571d25ff2756&d=AwMFaQ&c=8hUW >>> FZcy2Z- >> Za5rBPlktOQ&r=JOuddKqy8U0za9sj3XnXgmDQ3RLS98xIjIwaaTaI68Q&m=WJy >>> >> vbWO6jIZaMN1ZcvsaZ6OTrcKvq3WsGQiimSELTCM&s=s2qpeU8tvpZ6GQWaG >> YZdZOzevZU >>> NdQ5sRjHDBRWLLE0&e=> They are pretty alpha quality at this point and I >>> am working on optimizing them. Email any issues in your trial. Thanks. >>> Best >>> Zeo >>> >> >
Attachment:
signature.asc
Description: OpenPGP digital signature