by Diane Soini.
I've read the documentation but cannot figure it out.
https://www.yourmoodle.com/login/token.php?username=USERNAME&password=PASSWORD&service=moodle_mobile_app
If I sent my username and password the result is:
"Error code: invalidlogin"
My authentication method on my system is CAS. Does this only work with manual logins?
Is there a way to create a token for this service in a moodle instance with a user who uses CAS to log in? If not, I have been able to create a token for an admin user and use its token. Then I can call the gradereport_overview_get_course_grades function, passing in the user's id. I worry that this is not safe though. Will users be able to discover the token and thus figure out how to retrieve grades for users other than themselves?
Please advise!!