fixed cors and added a get endpoint for experiment questions in flask. Also added a script that stops loading the questions page if the params for pid and expid are not present.

Yuval-Roth · Yuval-Roth · commit 095246091b55 · 2025-05-24T02:21:27.000+03:00
diff --git a/game_server/src/main/kotlin/com/imsproject/gameserver/business/auth/SecurityConfig.kt b/game_server/src/main/kotlin/com/imsproject/gameserver/business/auth/SecurityConfig.kt
@@ -20,6 +20,7 @@ class SecurityConfig(
     @Throws(Exception::class)
     fun securityFilterChain(http: HttpSecurity): SecurityFilterChain {
         http
+            .cors { it.configurationSource(corsConfigurationSource()) }
             .authorizeHttpRequests { authorize ->
                 authorize
                     .requestMatchers(
diff --git a/manager/src/app.py b/manager/src/app.py
@@ -478,6 +478,10 @@ def get_all_sessions_route():
         return jsonify({"status": "error",
                         "message": "Internal server error"}), 500
 
+@app.route('/experiment_questions', methods=['GET'])
+def get_experiment_questions_route():
+    return render_template('experiment_questions.html')
+
 
 if __name__ == '__main__':
     # run on port 80
diff --git a/manager/src/templates/experiment_questions.html b/manager/src/templates/experiment_questions.html
@@ -1,5 +1,14 @@
 <!DOCTYPE html>
 <html lang="he" dir="rtl">
+<script>
+const params = new URLSearchParams(window.location.search);
+const expId = params.get('expid');
+const pid = params.get('pid');
+if (!expId || !pid) {
+    alert('שגיאה: חסר מזהה ניסוי או מזהה משתתף.');
+    window.stop();
+}
+</script>
 <head>
   <meta charset="UTF-8">
   <title>שאלון חוויית שיתוף פעולה</title>
@@ -261,7 +270,7 @@
   function getQueryParams() {
     const params = new URLSearchParams(window.location.search);
     return {
-      expId: parseInt(params.get('expId')),
+      expId: parseInt(params.get('expid')),
       pid: parseInt(params.get('pid'))
     };
   }
