Assessr:DevNotes

From QTITools Wiki

Linking to playr:

assessr could produce links to playr in the form http://playr.qtitools.com/init.jsp?assessr=foo/bar.zip, however, these links would be bookmarkable - a feature that is not desired; for example if a tutor was using a shared workstation, someone could come along afterwards and view any of the assessments they played by looking in the browsers history!

In order to try and avoid this, we have taken a slightly different approach: assessr links to playr with links like http://playr.qtitools.com/init.jsp?assessr=abc-def-123-456 - these urls are only generated when the link is clicked, and the token part is written to a database with the associated assessment. Upon receiving the request, playr makes a call to assessr with the token (i.e. http://assessr.qtitools.com/assessment.jsp?token=abc-def-123-456). assessr looks in the database and if the token is found, the path of the cp is written to the output. The token is then immediately removed from the database, so that the url becomes invalid in the future. playr can then load the cp as if it were uploaded externally.