Changes

The ps1rfid code base supports importing member info via an API and caches it locally. Having it use a different API endpoint wouldn't be hard. Derek also was thinking that it could hit LDAP directly instead of going through an intermediary. I don't prefer that design but it is not important for me to agree. The disadvantage is that it ties the entry system to LDAP. If it hits a member management API rather than LDAP directly, we keep the logic for how we do permissions in the member management system without coupling it to whatever technology we use. It could be backed by LDAP or it could handle itself or it could use WebFoo2000. But, consider the case where both the rfid auth api and the member management both use LDAP as the ultimate source. If you have a ps1auth rfid system that can write to the LDAP server, and the member management can write the LDAP server, then you will have to put in crappy logic to have things be consistent. But, one advantage of having ps1rfid hit LDAP directly is that it won't depend on availability of the member management site. That advantage isn't enough for me to like that approach. [[User:Skm|Skm]] ([[User talk:Skm|talk]]) 12:53, 5 April 2016 (CDT)

The ps1rfid code base supports importing member info via an API and caches it locally. Having it use a different API endpoint wouldn't be hard. Derek also was thinking that it could hit LDAP directly instead of going through an intermediary. I don't prefer that design but it is not important for me to agree. The disadvantage is that it ties the entry system to LDAP. If it hits a member management API rather than LDAP directly, we keep the logic for how we do permissions in the member management system without coupling it to whatever technology we use. It could be backed by LDAP or it could handle itself or it could use WebFoo2000. But, consider the case where both the rfid auth api and the member management both use LDAP as the ultimate source. If you have a ps1auth rfid system that can write to the LDAP server, and the member management can write the LDAP server, then you will have to put in crappy logic to have things be consistent. But, one advantage of having ps1rfid hit LDAP directly is that it won't depend on availability of the member management site. That advantage isn't enough for me to like that approach. [[User:Skm|Skm]] ([[User talk:Skm|talk]]) 12:53, 5 April 2016 (CDT)