Skip to content

SecureTest v1.6.2

Choose a tag to compare

View all tags
@james-cantonwine james-cantonwine released this 09 Oct 16:00
· 131 commits to main since this release
v1.6.2
c179cfe

Secure Test v1.6.2

Built from c179cfeed217 on main. Requires macOS 26.4 or later.

Not yet notarized — install through Jamf. Apple's notary service is still refusing submissions for the district team (the agreement issue since v1.4.0). The pkg and app are Developer ID-signed with the hardened runtime, which is all a Jamf / AutoPkg install needs. A copy downloaded in a browser and opened by hand will be blocked by Gatekeeper until the notarization goes through.

What changed since v1.6.1 (from beta field data, 2026-10-08)

  • Leaving a test asks first. End secure session, Cmd-E, Cmd-Q and the window's close button now ask "End the secure session?" / "Quit Secure Test?" with Keep working as the default, while a test is on screen and not handed in. Students had been using the exit as a "back" button. A logout, restart, shutdown or MDM quit is never held up.
  • An expired sign-in goes back to Sign in. After about 8 hours the sign-in expires; the app used to show "No test list for this account." / "Could not join" with no way forward. It now says "Your sign-in has expired. Sign in again." on the sign-in card.
  • Clearer secure-start failures. "Couldn't start a secure session" now tells the student to wait a minute and open the test again from Your tests, and the teacher-side record carries the Mac's macOS version and model.
  • Hardening. Stricter checks on everything the test page sends to the app (item ids, types, answer lengths, drawings, read-aloud), no camera or microphone prompts from the page, and the app records sleep / wake during a secure session's end to diagnose sessions that end late.

Hand-run before release: the v1.6.2 rows under simulated lockdown, then this commit's Release build in a real Automatic Assessment Configuration session against the live server (start, Cmd-Q confirm inside the lock → Quit, Resume, hand in; scores and answers stored). See client/MANUAL-CHECKS.md, the v1.6.2 sections.

Requires configuration profile

The app reads its configuration from managed preferences; a pkg alone launches into "This Mac isn't set up for Secure Test yet." The profile already scoped for earlier releases carries over unchanged (keys did not change).

Preference domain Key Type Value
net.psd401.securetest.client ServerURL string https://<origin>
net.psd401.securetest.client GoogleClientID string <native-oauth-client-id>
Assets 3
Loading