UCSB Access Card Information

The GoGaucho developers have added screen scraping functionality to the student developed application GoGaucho to display to student meal plan information. The student logs into the access card website with their local login account and the application scrapes the screen to display it in the app. We requested that the functionality be removed from the app and below is the research that we did with ARIT (they support the access cards Blackboard software) in regards to providing a meal plans API available thru google oauth. At this time this functionality is not available. 

Hi,

Blackboard maintains the https://accesscard.campuscardcenter.com website and they handle all of the credit cards, balances, and transactions. I set up a page at https://ucen-webapps.ucen.ucsb.edu/plus/ that will log you into the Blackboard system using your UCSBNetID. That authentication piece and a method for uploading card numbers is the only API functionality I'm aware of. Any data retrieval is done through scheduled FTP jobs.

We don't advertise the UCSBNetID login page and instead point students to the Blackboard registration process to create credentials there so Blackboard can collect more detailed user information.

Thanks,

Mike

On Tue, Aug 13, 2019 at 12:01 PM Masha Aksenova <maksenova@ucsb.edu> wrote:

Hi all,

I have included Mike Blakemore on this thread as he is the developer who maintains the "backdoor" custom solution for checking meal plan and Gaucho bucks balances on the card.

Mike B, can you provide the details on how this custom solution is integrated with the Access card vendor system ( https://accesscard.campuscardcenter.com )?

Thanks,

Masha 

Masha Aksenova
Associate Director
Administrative & Residential Information Technology
University of California Santa Barbara
office:  805.893.7393 | mobile: 805.679.3806

On Tue, Aug 13, 2019 at 11:45 AM Diana Antova <dantova@ucsb.edu> wrote:

Hi Gary,

This is a vendor system, right? You can create a meal plan API that can use google oauth to authenticate? Is this what you are saying?

Thanks,

Diana

On Mon, Aug 12, 2019 at 5:51 PM Gary Scott <gary.scott@ucsb.edu> wrote:

There is a backdoor that uses ucsbnetid, and for several years I've wanted to scape the data for an API (I wrote a quick and dirty scraper), but never had the time to flesh it out. https://ucen-webapps.ucen.ucsb.edu/plus/

Someone else on Masha's team supports that system so you are talking to the right folks.

On Mon, Aug 12, 2019, 4:58 PM Diana Antova <dantova@ucsb.edu> wrote:

Hi all,

Last week Steven and I met with the GoGaucho developers, which are students developing a student app. We found that the app has functionality to let students to check their meal plan by asking them to provide the Access Card login information and screen scraping the information to display it. 

The students did a demo to us by logging into the access card website and we saw that it can hold credit card information to fund the card.

With this in mind we were concerned with letting them ask for user names and passwords, although we know that they have no malicious intentions. We requested that they take this functionality down and gave them a deadline of 2 weeks. 

They are still interested to provide this functionality and are asking if there is a way to login with sso to the access card website and if there is a meal plan API that they can use instead of the screen scraping.

Steven, feel free to add anything.

Thanks,

Diana
-- 

Diana Antova