From c6c09f9f64c411ddf5d435ab7430560104b6e8d3 Mon Sep 17 00:00:00 2001
From: jbcarras <jbcarras@buffalo.edu>
Date: Tue, 1 Sep 2026 17:31:06 -0400
Subject: [PATCH] Fix swipe

---
 api/queue/routes.py                     | 2 +-
 api/roster/routes.py                    | 6 +++---
 client/src/components/common/Header.vue | 2 --
 client/src/pages/ManageCourse.vue       | 6 +++---
 4 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/api/queue/routes.py b/api/queue/routes.py
index 29f6d55..8afb869 100644
--- a/api/queue/routes.py
+++ b/api/queue/routes.py
@@ -43,7 +43,7 @@ def enqueue_card_swipe():
     swipe_data = body["swipe_data"]
     code = body["code"]
 
-    if code != db.get_hw_authorization():
+    if code != db.get_hw_authorization(g.course_id):
         return {"message": "Invalid code"}, 403
 
     if decode_pn(swipe_data) == "":
diff --git a/api/roster/routes.py b/api/roster/routes.py
index f5a5214..89d7fb6 100644
--- a/api/roster/routes.py
+++ b/api/roster/routes.py
@@ -10,7 +10,7 @@
 # any other decorators such as, auth decorators (min_level, exact_level) must go below it
 
 
-@blueprint.route("/upload-roster", methods=["POST"])
+@blueprint.route("/roster", methods=["POST"])
 @min_level("ta")
 def upload_roster():
     """
@@ -87,7 +87,7 @@ def upload_roster():
 # TODO: get roster
 
 
-@blueprint.route("/get-roster", methods=["GET"])
+@blueprint.route("/roster", methods=["GET"])
 @min_level("ta")
 def get_roster():
     """
@@ -227,7 +227,7 @@ def update_role(user_id):
     return {"message": "Updated role."}
 
 
-@blueprint.route("/clear-enrollments", methods=["DELETE"])
+@blueprint.route("/roster", methods=["DELETE"])
 @min_level("instructor")
 def clear_enrollments():
     """Clear all student enrollments. This soft-deletes their accounts,
diff --git a/client/src/components/common/Header.vue b/client/src/components/common/Header.vue
index cc75547..83add5e 100644
--- a/client/src/components/common/Header.vue
+++ b/client/src/components/common/Header.vue
@@ -32,8 +32,6 @@ function setupHeader() {
     showCourse.value = false;
   }
 
-  console.log(showCourse.value)
-
   fetch("/api/me").then(res => res.json()).then(json => myCourses.value = json["enrollments"])
 }
 
diff --git a/client/src/pages/ManageCourse.vue b/client/src/pages/ManageCourse.vue
index d50068a..424d8e9 100644
--- a/client/src/pages/ManageCourse.vue
+++ b/client/src/pages/ManageCourse.vue
@@ -45,7 +45,7 @@ fetch("/api/me").then(res => {
 
 const users = ref<Array<Array<any>>>([]);
 
-const getRoster = () => fetch(`/api/course/${course}/get-roster`).then(res => {
+const getRoster = () => fetch(`/api/course/${course}/roster`).then(res => {
   if (!res.ok) {
     router.push(`/${course}/queue`)
   }
@@ -77,7 +77,7 @@ const setCSVFile = (event: any) => csvFile.value = event.target?.files[0]
 function uploadCSV() {
   const data = new FormData()
   data.append('roster', csvFile.value)
-  fetch(`/api/course/${course}/upload-roster`, {
+  fetch(`/api/course/${course}/roster`, {
     method: "POST",
     body: data
   }).then(res => {
@@ -180,7 +180,7 @@ function deleteUser(user: string) {
 const clearDialog = ref<typeof ConfirmationDialog>();
 
 function clearStudents() {
-  fetch(`/api/course/${course}/clear-enrollments`, { method: "DELETE"} ).then(res => {
+  fetch(`/api/course/${course}/roster`, { method: "DELETE"} ).then(res => {
     if (!res.ok) {
       alertBox.value?.setError("Failed to clear roster.")
     } else {