Proctor APPDEV1_LEVEL1_VIVA2

SimpleDemo script pehle se practice: 5–7 min, Admin + User roles, saare mandatory features.

Suggested flow1) Register/login user
2) Admin login — CRUD
3) Approval/blacklist
4) Booking/apply + edge case
5) Search
6) Logout

Viva tipBolte-bolte dikhao. Code tab kholna jab poochhein.

SimpleViva wrap-up hai. Short thanks + confirm submission ZIP latest hai.

SimplelocalStorage browser mein key-value string store karta hai — tab band hone pe bhi rehta hai. Token/theme ke liye use.

Example

localStorage.setItem('token', jwt)
const t = localStorage.getItem('token')
localStorage.removeItem('token')

Viva tipSensitive password mat rakho. XSS se steal ho sakta hai — HttpOnly cookie safer for session.

SimpleLive UI change: relevant CSS/HTML template kholo — color, margin, flex, bootstrap class. Save + hard refresh.

Example

/* button red */
.btn-primary { background: red; }

/* center navbar item */
.navbar { justify-content: center; }

Viva tipDevTools se pehle try, phir file mein permanent change.

SimplePehle 1-line definition, phir apne MAD1 project mein file dikhao, phir chhota example.

Suggested flow1) Concept kya hai?
2) Mere code mein kahan?
3) Example / demo
4) Edge case

Example

# related file: models.py / routes / template
# formula: request → check/auth → DB → render/redirect

Viva tipExact line yaad nahi to honestly related part dikhao. Bluff mat karo.

SimpleJinja2 Flask ka template engine — HTML ke andar {{ }} variables, {% %} logic.

Example

{% for lot in lots %}
  <li>{{ lot.name }} — {{ lot.spots }}</li>
{% else %}
  <p>No lots</p>
{% endfor %}

SimpleGitHub repo public/private policy ke hisaab, MAD-1 collaborator add, commits dikhao.

Repo → Settings → Collaborators → instructor added.
Commits: git log / GitHub History — regular commits better, ek dum 1 commit suspicious.
README + report mein AI usage likha hona chahiye agar use kiya.

SimpleDemo script pehle se practice: 5–7 min, Admin + User roles, saare mandatory features.

Suggested flow1) Register/login user
2) Admin login — CRUD
3) Approval/blacklist
4) Booking/apply + edge case
5) Search
6) Logout

Viva tipBolte-bolte dikhao. Code tab kholna jab poochhein.

SimpleJWT teen tukde ki signed chitthi: header.payload.signature. Padhi ja sakti hai, badli nahi ja sakti.

Encoded (Base64) + signed, encrypted nahi (JWE alag). Payload mein password mat daalo — koi jwt.io pe dekh lega.

Login pe server secret se HMAC (HS256). Har API Authorization: Bearer <token>.
Expiry exp. Change payload → signature fail → 401.

Session MAD1 server yaad rakhta. JWT MAD2 client rakhta, server stateless-ish.

Example

eyJhbGciOiJIUzI1NiJ9.{"sub":1,"role":"admin"}.signature
# Authorization: Bearer <token>

Project example: POST /login → token LS. fetch interceptor header. @jwt_required APIs.

Viva tipAlgo HS256. Secret env var. jwt.io pe payload dikhao, secret public site pe mat paste.

SimpleJS variables: var (function scope, old), let (block), const (block, reassign nahi).

Example

let count = 0;
const API = '/api';

SimpleJWT teen tukde ki signed chitthi: header.payload.signature. Padhi ja sakti hai, badli nahi ja sakti.

Encoded (Base64) + signed, encrypted nahi (JWE alag). Payload mein password mat daalo — koi jwt.io pe dekh lega.

Login pe server secret se HMAC (HS256). Har API Authorization: Bearer <token>.
Expiry exp. Change payload → signature fail → 401.

Session MAD1 server yaad rakhta. JWT MAD2 client rakhta, server stateless-ish.

Example

eyJhbGciOiJIUzI1NiJ9.{"sub":1,"role":"admin"}.signature
# Authorization: Bearer <token>

Project example: POST /login → token LS. fetch interceptor header. @jwt_required APIs.

Viva tipAlgo HS256. Secret env var. jwt.io pe payload dikhao, secret public site pe mat paste.

SimpleAuthentication: tu kaun hai? (login). Authorization: tujhe permission hai? (role check).

Example

# auth
if check_password_hash(user.password, pwd):
    session['user_id'] = user.id

# authz
if user.role != 'admin':
    abort(403)