diff --git a/handbook/troggle/trogregistr.html b/handbook/troggle/trogregistr.html index e5af631c3..4054d4e8a 100644 --- a/handbook/troggle/trogregistr.html +++ b/handbook/troggle/trogregistr.html @@ -5,12 +5,13 @@
We did option #1. No problem. +
We did option #1. No problem. But see 2025 footnote.
Troggle has two "users", each with a password. They are managed by entirely separate systems:
We write out own code to manage the "expo" user's capabilities and login GET/POST form (which would still have to use Django's form POST mechanisms because of session handling, CRSF security, cookies etc. etc.).
It might appear that proposal #2 would be on the road to eventually leaving Django, but because of the security issues it wouldn't really. This would all need to be rewritten again when we leave Django. So I think Proposal #1 will require less wasted work. +
As troggle expands its capabilities we have been discovering that we could really use an individual user identification system. +
So in January 2025 we introduced our own simple user registration system which stores the data as encrypted entries in JSON files, since we have a "file first & re-import" storage architecture whereas all other Django systems use a "database first" system. +
This new registration system integrates with the experimental "expo signup" system whereby people we don't (yet) know can sign up to request to come on expo, and be easily distinguished from attendees from previous expos.