Skip to content
Snippets Groups Projects
  1. Mar 13, 2015
    • Matt Drayer's avatar
      Added Certficates Web/HTML View · 16e63c9e
      Matt Drayer authored
      16e63c9e
    • Clinton Blackburn's avatar
      Added commerce/purchase endpoint · eaa7a220
      Clinton Blackburn authored
      This new endpoint is intended to replace enrollment API call used on the login+registration page. Instead of directly enrolling students, the view will contact the external e-commerce API (Oscar) to create a new order. Oscar will be responsible for completing the order and enrolling the student.
      
      This behavior will only apply to course modes with associated SKUs. All other course mode enrollments will be processed directly by LMS.
      eaa7a220
  2. Mar 11, 2015
    • alawibaba's avatar
      Fixed ID bug in China CDN experiment, added default, changed graphite metric... · cdc81c88
      alawibaba authored
      Fixed ID bug in China CDN experiment, added default, changed graphite metric name, and exposed CDN monitoring ENVs.
      cdc81c88
    • Will Daly's avatar
      Cross-domain CSRF cookies · a5a303ae
      Will Daly authored
      When configured, set an additional cookie with the CSRF
      token for use by subdomains.
      
      The cookie can have a different name than the default
      CSRF cookie, preventing conflicts between cookies
      from different domains (e.g. ".edx.org", "courses.edx.org",
      and "edge.edx.org").
      
      The new cookie is included only on the enrollment API
      views so that the scope of this change is limited
      to the end-points that require cross-domain POST requests.
      a5a303ae
  3. Mar 09, 2015
    • Greg Price's avatar
      Add an endpoint to exchange OAuth access tokens · e85eb91e
      Greg Price authored
      This allows the holder of a third-party access token (e.g. from Google
      or Facebook) to get a first-party access token for the edX account
      linked to the given access token.
      e85eb91e
    • Will Daly's avatar
      Cross-domain CSRF cookies · cbdc269b
      Will Daly authored
      When configured, set an additional cookie with the CSRF
      token for use by subdomains.
      
      The cookie can have a different name than the default
      CSRF cookie, preventing conflicts between cookies
      from different domains (e.g. ".edx.org", "courses.edx.org",
      and "edge.edx.org").
      
      The new cookie is included only on the enrollment API
      views so that the scope of this change is limited
      to the end-points that require cross-domain POST requests.
      cbdc269b
  4. Mar 06, 2015
  5. Mar 05, 2015
  6. Mar 04, 2015
  7. Mar 03, 2015
  8. Mar 02, 2015
  9. Feb 26, 2015
  10. Feb 24, 2015
  11. Feb 23, 2015
    • Will Daly's avatar
      Deprecate old embargo implementation. · ae8ddc8a
      Will Daly authored
      The new "country access" implementation replaces the old
      implementation.  Middleware and tests have been updated
      accordingly, but deprecated models are preserved
      for backwards compatibility.
      ae8ddc8a
  12. Feb 20, 2015
  13. Feb 19, 2015
  14. Feb 18, 2015
  15. Feb 17, 2015
  16. Feb 16, 2015
    • Xavier Antoviaque's avatar
      xblock-external-ui: Add XBlock API call to render XBlock views · 2ba49579
      Xavier Antoviaque authored
      xblock-external-ui: Include CSRF token in the API answer
      xblock-external-ui: Include full path when building local_url
      xblock-external-ui: Fix TestHandleXBlockCallback & bok_choy, add tests
      xblock-external-ui: Only return `instance` in `_invoke_xblock_handler()`
      xblock-external-ui: Group resources by hash tag to avoid duplicate loads
      xblock-external-ui: PEP8
      xblock-external-ui: Fail early if the XBlock view is called anonymously
      
          We used to serve anonymous requests, but most XBlocks assume that the
          user is logged in, which can generate a lot of errors when the user is
          accessed or when an XBlock ajax callback is queried. Fail early to only
          get one error per page load, and prevent displaying the XBlock
          altogether when the LMS doesn't find an active user session.
      
      xblock-external-ui: Add request params in view render context
      xblock-external-ui: HTTP error status when file is too large for handler
      xblock-external-ui: Fix unicode encodings in XBlock rendering
      xblock-external-ui: Feature flag for API call ENABLE_XBLOCK_VIEW_ENDPOINT
      2ba49579
  17. Feb 13, 2015
  18. Feb 11, 2015
  19. Feb 09, 2015
  20. Feb 03, 2015
  21. Feb 02, 2015
  22. Jan 30, 2015
  23. Jan 29, 2015
  24. Jan 28, 2015
  25. Jan 27, 2015
  26. Jan 22, 2015
  27. Jan 21, 2015
  28. Jan 20, 2015
    • Will Daly's avatar
      Add RequireJS and RequireJS Optimizer configuration to the LMS · 1d6fceda
      Will Daly authored
      Respond to review comments:
      
      - Rename build and config files for consistency between lms/studio.
      - Fix merge conflicts with lms require config.
      - Devstack uses optimized pipeline to skip require JS optimizer step
      - Add tests for render_require_js_path_overrides
      1d6fceda
  29. Jan 16, 2015
Loading