• 嗦麦麦的测试机器
• Git actions部署脚本

使用什么信息注册？比如邮箱，手机，用户名，etc
使用什么信息登录？（如果和注册信息不完全一样）
什么情况下会有验证码之类的机制？
@CalElFe @Superskyyy

• Review the current user model

• Implement single sign on

Course load info is needed as per the design

现在的QAuth应该作为api的名字 误把user model的名字取为QAuth了 应改为QUsers

• Users tend to search for something like AGHE 818.
  Now an exact match will not come up, it only shows anything related to AGHE 8xx.
  We will add a new field to the course model, either show this field(AGHE-818) or AGHE(Subject-name) + 818 (Subject-code) Remove one of them from Serializer.

描述：在使用smtp协议发送邮件的时候 可以轻而易举伪造发件人邮箱 从而达成搞与被人搞的操作。

解决方案：参考https://www.zhihu.com/question/19574247

Pending tests on SSO

With the help of GIN and SearchVector Field, we can further boost the search performance

• CSRF Tokens

• JWT Tokens

• API Key/ Secret Distribution and validation

如果我们写个油猴脚本, 开发人员监狱风云否?

• Django project source

• PostgreSQL

• Selenium

An Anti Anti-Scraper mechanism

In the result page of database search, we would have a preview feature which only contains key information from a course, instead of using the full data.

• results grouped by content sections

  • need to define content sections @CalElFe @Superskyyy
    • 可能需要参考后台数据是怎么归类的?

• filter

  • by content sections
  • by time
  • more? @Superskyyy @CalElFe

The current default database charset/collation has compatibility issues with unicode characters

我们要不要商定一个统一的branch规则，比如用git flow的feature/hotfix模型之类的

Dependabot couldn't authenticate with https://pypi.org/simple/.

You can provide authentication details in your Dependabot dashboard by clicking into the account menu (in the top right) and selecting 'Config variables'.

View the update logs.

我propose一个新功能 优先级低于其他 优先完成基础 再做这个。

• 功能 通过selenium远程选择自定课表上的课程。

• 细节 在UI上加一个新的入口对接Selenium 选课脚本 这个入口每天通过waitlist限量开放 通过限制次数 只做实验目的 -> 直到我们可以找到合适的办法保证安全存储传输清理用户的账号密码

• 效果：通过解决国内学生翻墙痛点，来达成网站推广目的。

• UI：需要新的入口和对应页面。

• 交互：与已设计的系统交互的方式是通过排课表功能的入口拿到课程并且向用户取得密码后交给selenium自动完成单次/多个代选课 可以通过selenium的snapshot回传课程是否选上等信息。

• ⚠️抢课功能因为高风险得不偿失不在考虑范围内 如果有不会被抓的奇技淫巧可以在新issue提出

In order to finish the full functionality of #43, the QScraper configuration procedure has to be changed.
Details:
To the security concerns, the personal account information should not appear during CI and deploy procedures. Therefore, the scraper should be configurated after the testing server is UP and entered via the admin page.

• 思路1

selenium获取到cookie，然后用其他框架爬

• 思路2

用selenium往页面嵌js，做预处理（√）

• 思路3

写一个更高级的脚本系统来引导python

Implement Course Review and Rating section

• Review section with/ maybe with pictures.

• Rating bar with stars, this section can show up

1. at Preview?
2. Top of the detail page or Each time a user gives review?

• Connect User model to the reviews, able to view reviews in user panel.
• Block the user model in public view(serializer)

This allows our Dependabot to help maintain an up-to-date dependency structure.

Design Database pages

• grade distribution
• course catalog
• degree planing
• secret library

为啥在哪个insights里没看到我自己最近push的记录啊……

We would want the whole site to be dockerized.

• Frontend

• Backend