Jon Buckley

Record when content is modified

1

It was recommended by Mozilla InfoSec that we record each content modification with a timestamp, the account , the ip address, and the url that was modified.

Should OPTIONS requests do any validation?

5

@ashleygwilliams was working on implementing shallow routes for `/users/{userid}` when she brought up the fact that we're not doing any validation of the `userid` parameter: https://github.com/mozilla/api.webmaker.org/blob/d0122340e6cd018b90195d7a79bac5080e827661/services/api/routes/authenticated.js#L116-L131 . Currently we do...

Get expected snippet usage numbers

5

@secretrobotron is going to help us distil some targets to use for number of expected simultaneous users. We currently expect to have 50k downloads from snippet traffic. We should try...

Measure the maximum request limits

3

We'd like to test our current api code to see what the maximum read and write limits are of the API. @ashleygwilliams will use load impact to come up with...

Look at enabling caching on the API server

1

What resources can we enable caching for in the API server. The discovery view that every single user hits feels like an obvious win, but there are probably others.

Data source compute security policy file and function renames

7

I was looking into fixing a Cloud Armor perma-diff when I found this filename and function not matching the resource/API name. This PR renames the files (`secutity` to `security`) and...

Resolves #524 ---- ### Before the change? * You cannot look up GitHub users by id ### After the change? * You can look up GitHub users by id ###...