Skip to content

Commit 79b5e40

Browse files
Add performance metric
1 parent 0794024 commit 79b5e40

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

_docs/developer/rensselaer_center_for_open_source/2025_Jeffrey_Cordero.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ Beyond implementation work, I gained valuable experience in collaborative develo
1111

1212
I addressed a critical security flaw in the platform's WebSocket server by implementing a token-based authorization system ([#11634](https://github.com/Submitty/Submitty/pull/11634)). Previously, any user with a direct URL and valid login credentials could access any WebSocket page, posing a considerable risk for real-time student-instructor communications.
1313

14-
To resolve this, I designed a JSON Web Token (JWT)–based authorization layer, where the web server now generates short-lived, multi-use tokens scoped to specific pages. Each token ensures that WebSocket connections are established by authorized users, with permissions managed using a sliding window mechanism to handle expired pages.
14+
To resolve this, I designed a JSON Web Token (JWT)–based authorization layer, where the web server now generates short-lived, multi-use tokens scoped to specific pages. Each token ensures that WebSocket connections are established by authorized users, with permissions managed using a sliding window mechanism to handle expired pages. This approach cut the average WebSocket connection authentication time by approximately 90%.
1515

1616
```json
1717
{

0 commit comments

Comments
 (0)