extension/learn — Issue #57: Handle eXtensionID logins prior to synchronization
Author: jasonadamyoung
Created: 2011-12-09 01:42:14+00:00
State: open

There exists a small window of time under normal operation where someone could validate their eXtensionID and login into Learn prior to account sync. The time window could be larger if the account synchronization is delayed for whatever reasons.

There are multiple options

* block extensionid login where no authmap yet exists - this requires extra code, and needs to be done in a manner that wouldn't be confusing to the recipient
* change darmok_id to be the extensionid string instead of the account id - since that's returned by the extensions to the data transfer - requires changes to account sync per Issue #34
* rework the account synchronization to join on the authmaps - this may be prohibitively complex.