ayanova/devdocs/todo.txt

@@ -3,8 +3,15 @@
 PRIORITY - ALWAYS Lowest level stuff first, i.e. TODO at server, api route changes etc then back here in order lowest level first as affects the most stuff exponentially so best to do it early
 =-=-=-=-
 
-todo: sample data locale keys say 1 sample user and 1 tech etc, but in fact there are lots of users because of the roles samples, so
-	change the translation to leave out the number of users and just go small med large huge and a more vague description that doesn't mention specific user counts
+
+todo: license keys security
+	What is to stop someone from fetching someone else's key by hammering with different GUID's until they get one that works?
+	Encrypt the guid inside something identifiable or matching?
+		sign the request?
+	Dont send just a guid in clear as a basic precaution.
+	make dbid's a huge number instead of a guid would be a good first principle
+	SGDCXPThwOZgbfcxQJwF1L8MMmbVyjDp6WMaTj0LFPk=
+FqC3t+8f2p/RXkclI6nKqhU35cRVHL9d/neZO7giInc=
 
 todo: Administration - translation
 	translation page with translation settings
@@ -14,6 +21,9 @@ todo: Administration - translation
 
 todo: Administration - Attached files
 
+
+
+
 todo: Administration - History
 	What is this for?
 	Check if something noted in specs or cases or todo's or comments or help file or something from v7 being expanded / broken out

ayanova/src/main.js

@@ -61,7 +61,7 @@ import chartBarHorizontalControl from "./components/chart-bar-horizontal-control
 //DEVELOPMENT MODE
 //THIS SHOULD BE FALSE IN RELEASE
 //************************************************************
-const DEV_MODE = true;
+const DEV_MODE = false;
 //************************************************************
 //**************************************************************
 //**************************************************************

ayanova/src/views/adm-license.vue

@@ -360,7 +360,9 @@ export default {
 
         //send request
         r = await window.$gz.api.upsert("license/trialRequest", vm.request);
-
+        if (r.error) {
+          throw r;
+        }
         //a string is returned and will start with E1 if it's an error
         if (r.startsWith("E1")) {
           throw r;