Add api endpoint for list of student points in a course

aplus/settings.py

@@ -391,7 +391,6 @@
 ]
 TIME_ZONE = 'EET'
 USE_I18N = True
-USE_L10N = True
 USE_TZ = True
 FORMAT_MODULE_PATH = 'aplus'
 LOCALE_PATHS = (

edit_course/operations/clone.py

@@ -1,5 +1,7 @@
 import logging
 
+from datetime import datetime
+from django.utils import timezone
 from django.db import transaction
 from django.contrib.auth.models import User
 from course.models import CourseInstance
@@ -34,8 +36,8 @@ def set_sis(instance: CourseInstance, id: str, enroll: bool) -> None: # pylint:
         return
 
     if coursedata.get('starting_time') and coursedata.get('ending_time'):
-        instance.starting_time = coursedata['starting_time']
-        instance.ending_time = coursedata['ending_time']
+        instance.starting_time = timezone.make_aware(datetime.strptime(coursedata['starting_time'], '%Y-%m-%d'))
+        instance.ending_time = timezone.make_aware(datetime.strptime(coursedata['ending_time'], '%Y-%m-%d'))
 
     instance.sis_id = id
     instance.sis_enroll = enroll

exercise/api/views.py

@@ -551,12 +551,10 @@ class CoursePointsViewSet(ListSerializerMixin,
     lookup_url_kwarg = 'user_id'
     lookup_value_regex = REGEX_INT_ME
     parent_lookup_map = {}
-    listserializer_class = StudentBriefSerializer
+    listserializer_class = UserPointsSerializer
     serializer_class = UserPointsSerializer
 
     def get_queryset(self):
-        if self.action == 'list':
-            return self.instance.students
         return self.instance.course_staff_and_students
 
 

external_services/api/authentication.py

@@ -54,12 +54,13 @@ def verify_oauth_body_hash_and_signature(request, req_body_hash, lti_exercise=No
 
     # check the OAuth timestamp. Do not allow old requests in order to prevent replay attacks.
     try:
-        timestamp = datetime.datetime.utcfromtimestamp(int(req_oauth_params_dict.get('oauth_timestamp')))
+        timestamp = datetime.datetime.fromtimestamp(int(req_oauth_params_dict.get('oauth_timestamp')),
+                                                    datetime.timezone.utc)
         # oauth_timestamp: seconds since January 1, 1970 00:00:00 GMT
     except ValueError:
         return False, 'oauth_timestamp is missing or has an invalid format'
 
-    now = datetime.datetime.utcnow()
+    now = datetime.datetime.now(datetime.timezone.utc)
     delta = datetime.timedelta(seconds=OAuthNonceCache.CACHE_TIMEOUT_SECONDS)
     if not (now - delta < timestamp and timestamp < now + delta): # pylint: disable=chained-comparison
         return False, 'oauth_timestamp has expired'