janastu / anno-server-prototype Goto Github PK

Problem: In current version all DB credentials are exposed in code
Solution: create a seperate config.py(with credentials) and sample_config.py(template) for developers

solution: code can be merged

In order to be compliant with the Web Annotation Protocol we need to support LDP.

I think we can start with implementing the Basic Container model.

Relevent information for these specs are (will put in Wiki too)

the following were released on May 31 2016, there may be changes. Several non-normative parts. But, reflects lots of hard work going on for a long time. So, worth pursuing. Such is life on the leading edge :)

• Web Annotaiton Protocol (latest version) ---
• Web Annotation Data Model --
• Web Annotation Vocabularly

LDP is pretty stable with existing implementations. We should find some decent Python implementation. Relevant spec:

• LDP Primer

Short hack: Currently only Basic auth is implements, which needs the DB username and password to be saved in the config file, to authorize post and delete requests.

Permanent fix: Oauth 2.0 implementation, with app_id and app_secret for each app, so that relevant permissions can be updated