jic-dtool / dtool-lookup-webapp Goto Github PK

This will make it easier to find datasets of interest.

It is likely that the natural place this functionality will be somewhere just below the header.

This will probably requires some improvements to the dtool-lookup-server

Why is FLC found in flc.bam but 2018_03 not found in 2018_03_05?

If the JWT token is set to expire, then the webapp no longer shows datasets after expiration. The user should probably be send back to the login screen once this happens.

At the moment the JSON web token is simply stored in a variable in the javascript. This is secure but means that a user is logged out every time the window is refreshed.

Some users have requested that the login credentials persists between sessions.

This would involve working out how to securely store the JSON web token. There are two options Web Storage and cookies. Web Storage can be vulnerable to cross-site scripting attacks. Cookies can be vulnerable to cross-site request forgery attacks.

Currently list_tags returns a list. The AzureStorageBroker tests test for an explicit order of the tags.

My question:

• Should the tags be returned in some specific order, e.g. the order in which they are created?
• If not, should list_tags return a set?

This could be done using a scroll bar or a number telling the user about the number of items in the dataset.