IMIO / plonemeeting.portal.core / 27534611833

94%

Build Type

push

github

Committed by duchenean

Commit Message

DELIBE-307: Re-provision Plausible shared link on every view

Stop caching the shared link auth token forever. The dashboard is a
cross-origin iframe, so the server cannot tell when an embedded link goes
stale; instead, re-provision the link through Plausible's idempotent
find-or-create API on every access. The dashboard now self-heals when the
link is deleted, rotated or invalidated on the Plausible side (e.g. after a
domain change).

Drop the now-dead token cache (the Institution plausible_shared_link_token
field and the matching registry record) and the CSRF exemption that only
existed because the token was written on a GET.

Coverage Stats

10 of 10 new or added lines in 2 files covered. (100.0%)

27 existing lines in 7 files now uncovered.

3079 of 3265 relevant lines covered (94.3%)

0.94 hits per line