# Legacy client (Vue 2) **What it is.** The original ADAM staff + student web app in `client/` - Vue **2.6.11**, vue-router 3 (hash mode, every URL is `/#/...`), vue-i18n 8, bootstrap-vue 2.21, jQuery, Froala/CKEditor, Chart.js, built with `@vue/cli-service` 4.5 (`client/vue.config.js`, `publicPath: "/static"` in production). It is **superseded** by [[frontend-app]] (staff), [[admin-ui-app]] (internal ops) and [[tester-ui-app]] (students/proctors) but is **still built, deployed and maintained** (commits through 2026-10, e.g. ADAM-2446 rich-text sanitising, ADAM-1896 glue socket hardening), so `status: legacy`, not dead. Screens are split across [[legacy-shell-ui]] (login/SSO/family portal/landing/profile), [[legacy-system-ui]], [[legacy-file-io-ui]], [[legacy-tester-ui]] (static `client/public/tester`), plus the areas documented by sibling nodes: [[legacy-rostering-ui]], [[legacy-reporting-ui]], [[legacy-my-classes-ui]], [[legacy-classroom-ui]], [[legacy-authoring-ui]], [[legacy-qti-authoring-ui]], [[legacy-qti-ad-authoring-ui]], [[legacy-qti-item-editor-ui]] and shared [[legacy-client-components]]. ## Is it still served? (deployment) - **Docker**: stage `clientbuild` (node **14.21.3**, `npm install` - must run the `preinstall` hook `scripts/force-resolutions.js`, ADAM-715) runs `npm run build`; target **`main-app-deploy`** copies `/client/dist` to `/app/client/dist` (`Dockerfile`). The other three targets (`frontend-deploy`, `admin-ui-deploy`, `tester-ui-deploy`) put *their* SPA into the same `/app/client/dist`, i.e. the same Go binary serves a different SPA per image ([[build-deploy]]). - **Jenkins** builds all four (`Jenkinsfile:101-104`): `--target main-app-deploy` → `ecrAppImageName` (the "adam-app" image, version `adam_version`). So the legacy client is what the **main API host (`APP_URL`, e.g. adamexam.com)** shows at `/`. - **GitHub Actions `build.yml`** still builds it (`npm ci && npm run build`) and zips an Elastic Beanstalk package when `client/` changes; `build.sh` is the old EB build (`zip ... client/dist/ ...`). - **Go serving** (`main.go:189-213`, [[api-server]]): `r.Use(apis.Serve("/", LocalFile("./client/dist", true)))` and the same at `/static` (`src/v2/apis/custom_static.go` - `Serve` only handles the request if the file exists on disk, then `c.Abort()`; otherwise falls through to API routes). `NoRoute`: `/proctor` and any path not starting with `/api/ /static/ /internal/ /swagger/ /v2/` → `client/dist/index.html`. Because static files are checked *before* routes, any file in `client/public` shadows an API path of the same name. - Cross-app hand-off: `/v2/app_urls` ([[auth-api]] `AppURLs`, from [[global-setting]] keys `APP_URL`, `FRONTEND_APP_URL`, `TESTER_APP_URL`, `WINDOWS/MAC_*_APP_URL`, `ABIGAIL_URL`). `Login.vue` shows a "try the new preview" button that does `window.location.href = FRONTEND_APP_URL`. ## Status by area Areas whose every route has a Vue 3 counterpart are kept only for users still on APP_URL; areas with **no** counterpart are the reason the image still ships: - **No Vue 3 equivalent (legacy-only, live):** family portal `/family/:clientKey`; Louisiana reports `/louisiana_reports`; Learnosity authoring (`/author_items`, `/item/...`, `/author_forms`, `/passages/...`, `/form_print`, `/item_print`) and `/banks`; Learnosity my-classes (`/my_classes/learnosity...`, `/my_classes_a/...`); `/my_tests` + legacy reports; dynamic deliveries (`/eu_admins/dynamic`, `/deliveries/...`); `/reporting_thresholds`; `/test_publish_tests`; `/qti_sessions`; `/file_upload` (OneRoster CSV wizard); `/new_test`, `/tr`; the static **legacy tester** pages (still the target of LTI launches - [[lti-api]] redirects to `APP_URL/tester/confirm.html?token=`, and legacy `Proctor.vue` opens `/tester/launch.html`). - **Migrated** (frontend has an equivalent route; see table): system (clients, roles, requests, bulletins, downloads), rostering, test management/administrations, operations explorers, reporting/performance (v2), orders, QTI/AD authoring, student dashboard. Proctoring moved to tester-ui (`/proctor`, `/proctor/pg/:id`). - **Dead inside the client:** `views/mockups/*` (ClassReport, DistrictReport, LAStudentReport2, SchoolReport, ScoreCell) and `views/Example.vue` are imported by nothing (`grep -r "mockups/\|views/Example" client/src` → only self-references); `views/file_io/components/FileReview.vue` is commented out of `FileUpload.vue`; route `/la_student_report` is in the guard's skip list but no such route exists; `AnnouncementsService.getQuery` (`POST /v2/announcements/query`) and `FileUploadFunctions.checkUniqueUsernames` (`POST /v2/check_unique_usernames`) and `file_upload_service` `PUT /v2/aws_upload_file` hit routes that are not registered in `src/`. ## Boot sequence (`client/src/main.js`) 1. Reads `localStorage["adam-auth"]` into `axios.defaults.headers.common["X-Auth-Token"]`; `axios.defaults.baseURL = process.env.VUE_APP_URL`. 2. Registers global plugins/components (BootstrapVue, sweetalert2, vue-select, datepicker, timepicker, draggable, tippy, toastr, Froala, line-clamp, ``). 3. Forces https unless host contains `localhost`. 4. Custom-login hand-off: token in the hash query (`/#/landing?login=`) is copied into `adam-auth` **before** i18n loads. 5. `initI18N()` → `fetch('/v2/bundle/lang/')` ([[i18n-api]]; sets `Accept-Language` header and ``), then mounts `#app`. 6. Registers custom FontAwesome `fac` icons; `Toast.init`, `Alert.init` (wrappers around vue-toastr / sweetalert2); `rum.initRUM()` - AWS CloudWatch RUM with keys from `GET /v2/rum_keys`, enabled only with OneTrust consent group `C0002` unless `SHOW_COOKIE_BANNER=false`. `main.ts` is a one-line shim (`import "./main.js"`). `App.vue` is just `` + skip-link + `LoginAsBanner`. ## Auth & guard (`client/src/router.js`, `services/auth_service.js`, `services/token_service.js`) - `router.beforeEach`: `VersionService.checkVersionUpgrade()` (compares `package.json` version with `GET /v2/version`; prompts reload if server is newer; skipped when `VUE_APP_SKIP_VERSION_CHECK=true`); alerts on unmatched paths; `?login=` → `AuthService.setToken`. Skip-list `["/", "/proctor", "/family/:clientKey", "/la_student_report"]` bypasses auth. Otherwise injects `client_css` stylesheet from localStorage (a `` built with jQuery `.attr('href', …)`, not string interpolation, since the ADAM-2893 Snyk XSS fix), calls `GET /v2/me` and stores the user on `to.meta.user` (views read `this.$route.meta.user`), loads the client locale, then checks **`meta.roles`** (AND) / **`meta.rolesOr`** (OR of AND-groups) against `user.role_obj[]` using `{edit:2, view:1, hide:0}`; booleans pass through. `rostering.uploads` is the only nested key handled. Fail → `/not_found`; `/v2/me` error → `/`. This is **client-side only** - the API enforces its own `RequirePermission` guards. - `AuthService.setToken` stores JWT in `localStorage["adam-auth"]` + header and triggers `adamADOAuth()` (AD token in `adam-ad-token`). Axios response interceptor: any 401 (except `/v2/proctor/login` and AD `api/data` calls) clears localStorage and hard-redirects to `/`. - `TokenService` watches JWT `exp` (60 s buffer): if the user moved/typed in the last 600 s it calls `POST /v2/newToken` silently, otherwise shows a 60 s inactivity countdown. `logout()` clears localStorage except `StickyManager.persistingKeys`, clears the `adam-login-as` cookie, `GET /v2/logout`. - After login, `Utils.getLandingPage(role_obj.landing_page)` strips `#/`, origin and `/{class_id}...` and routes there (default `landing`). ## Service layer (`client/src/services`) `base_service.new(entity)` gives `get(id)` → `GET /v2//:id`, `query(q)` → **`POST /v2/`** (list = POST with paging body), `save(o)` → `PUT /v2/`, `delete`, `patch`. Most services wrap it and add bespoke endpoints: | service file | entity / prefix | backend node | |---|---|---| | `auth_service.js` | `/v2/login`, `/v2/me`, `/v2/newToken`, `/v2/logout`, `/v2/ext_pass/*`, `/v2/parent_account/*`, `/v2/site_key`, `/v2/login_as/`, `/v2/app_urls`, `/v2/user_accounts`, `/v2/switch_account` | [[auth-api]], [[user-api]] | | `user_service.js` | `users`, `/v2/profile`, `/v2/users/*import*`, `/v2/students/*` | [[user-api]] | | `role_service.js` | `/v2/roles`, `/v2/roletypes`, `/v2/roles/export`, `/v2/roles/:id/history` | [[role-api]] | | `request_service.js` | `admin_requests`, `/v2/admin_requests_*`, `/v2/my_requests`, `/v2/(un)assign_request`, `/v2/(de)escalate_request` | [[request-api]] | | `announcements_service.js` | `announcements`, `/v2/bulletins` | [[announcement-api]] | | `client_service.js` | `/v2/client`, `/v2/client/save_with_audit`, `/v2/client/history/:id`, `/v2/client_batteries`, `/v2/client/:key` | client_api.go ([[client-service]]) | | `branding_service.js` | `v2/branding/*` | [[branding-api]] | | `accommodation_service.js`, `subject_service.js`, `battery_service.js` | accommodations, `/v2/subject/:clientID` (subjects_api.go), `/v2/program_batteries` | [[accommodation-api]], [[client-service]], [[battery-api]] | | `job_service.js` | `job_progress` (`POST /v2/job_progress`) | [[qti-api]] | | `file_upload_service.js` | `/v2/upload_file`, `/v2/get_files_by_user_id` | [[aws-file-api]] | | `org_service.js`, `class_service.js`, `course_service.js`, `academic_session_service.js` | rostering | [[org-api]], [[class-api]], [[course-api]], [[academic-session-api]] | | `admin_service.js`, `proctor_service.js`, `proctor_group_service.js`, `sessions_service.js`, `explorer_service.js`, `session_review_service.js`, `test_service.js`, `program_service.js`, `field_sets_service.js` | test management | [[admin-api]], [[proctor-api]], [[proctor-group-api]], [[session-api]], [[test-api]], [[program-api]], [[field-sets-api]] | | `reporting_service.js`, `performance_reporting_service(_v2).js`, `results_service.js`, `results_explorer_service.js`, `report_assets_service.js`, `reporting_threshold_service.js`, `rejected_tests_service.js` | reporting | [[reporting-api]], [[performance-reports-api]], [[performance-report-v2-api]], [[item-results-v2-api]], [[results-api]], [[results-explorer-api]], [[report-assets-api]], [[reporting-thresholds-api]], [[rejected-tests-api]] | | `order_service.js` | orders, distributions, MOT | [[order-api]] | | `student_assignments_service.js`, `standard_service.js`, `sync_setting_service.js`, `dashboard_service.js`, `classroom/*` | misc | [[student-assignments-api]], [[standard-api]], [[sync-setting-api]], [[dashboard-api]], [[classroom-api]] | | `launchpad_service.js`, `launchpad_sync_service.js`, `clever_sync_service.js`, `oneroster_service.js` | roster sync | [[launchpad-api]], [[launchpad-sync-api]], [[clever-sync-api]], [[oneroster-upload-api]] | | `qti/*`, `testnav/*` | `qti_*`, `testnav_*` | [[qti-api]], [[testnav-api]] | | `adam_ad/*`, `xprt/xprt_service.js` | `/adam_ad/*` proxy and direct `${adamADHost}/api/data/*` | [[adam-ad-api]], [[ad-platform]] | | `bank_service.js`, `authoring_service.js` | Learnosity banks/items/forms/passages | [[bank-api]], [[item-api]], [[form-api]], [[passage-api]] | | `lti_service.js` | `POST /v1/lti/deep_linking_response` | [[lti-api]] | | `version_service.js`, `history_service.js` (`GET /v2/s/:id/history`), `table_csv_service.js`, `file_service.js` (client-side CSV/XLSX export), `lists.js`, `constants.js` | helpers | [[auth-api]] | Utilities: `utils/utils.js` (org-type levels/icons, `getLandingPage`, standards labels, sticky headers, `isSourcedIdEditable`), `utils/sanitize_html.js` (DOMPurify profile for every `v-html` of stored rich text, ADAM-1904/1905; re-embeds YouTube/Vimeo only), `utils/url_validation.js` (`isSafeUrl`, `isValidSettingsUrl`), `utils/sticky_utils.js` (`StickyManager` - localStorage-persisted table filters/sorts that survive logout), `utils/print.js`, `utils/demographic_utils.js` (race/ethnicity code), `formatters/time.js`, `wrappers/{toastr,sweet_alert,console}.js`. ## Static sub-apps in `client/public` (copied verbatim into `dist/`) - **`public/tester/`** - the legacy student test-delivery pages: see [[legacy-tester-ui]]. - **`public/internal/index.html`** - auth-code login page for the old server-rendered internal console: posts `{auth_code}` to `POST /internal/login_internal` ([[internal-api]], bcrypt-compared with `INTERNAL_ADMIN_PASSWORD`), stores the token in `localStorage["adam-internal-token"]` and navigates to `/internal/tenants` (rendered by `src/template/tenants.html`, [[internal-console]]). `internal/js/index.js` and `tenants.js` are empty files. Superseded by [[admin-ui-app]] login. - `public/index.html` - SPA shell; loads OneTrust cookie banner, Learnosity Reports API (`v2024.2.LTS`), FontAwesome Pro, `js/glue.js` (websocket client for [[websocket-hub]] at `/glue/ws`), `js/loadQTILibraries.js` (injects QTI item components + AD test player web components into `#qtiItemComponentsScript` / `#adTestPlayerScript`). - Also: `content_search.html` (LTI deep-linking content picker), `swagger/` (OneRoster swagger, `make swagger`), `examples/*.csv` (upload templates), `files/` (privacy policy, terms PDFs). ## Route table (`client/src/router.js`) Guard column is the client-side `meta.roles` check (`role_obj. >= view|edit`); "login only" = any user that `GET /v2/me` accepts. Area = view directory; per-area detail lives in the `legacy-*-ui` nodes. All paths are hash routes (`/#/`). | path | view (file under client/src/views) | guard (`meta.roles` → `user.role_obj`) | area | Vue 3 counterpart | |---|---|---|---|---| | `/` | `Login` | public (skipRoutes) | shell | frontend `/` (LoginView); Login.vue offers a "try new" link to FRONTEND_APP_URL | | `/reset-password` | (redirect to `/` keeping query) | n/a | shell | frontend `/reset-password` | | `/sso` | `SSO` | login only | shell | frontend `/sso` | | `/family/:clientKey` | `FamilyPortal` | public (skipRoutes) | shell | none (legacy only) | | `/family_landing` | `class_list/student_details/FamilyLanding` | login only | class_list | none (legacy only) | | `/profile` | `Profile` | login only | shell | frontend `/profile` | | `/tr` | `authoring/TestRender` | login only | authoring | none | | `/not_found` | `NotFound` | login only | shell | frontend `/common/404` | | `/progress/:programId?/:testId?/:view?` | `reporting/ProgressReport` | progress_report: edit | reporting | frontend `/reporting/progress` | | `/activity` | `reporting/TestingActivity` | activity_report: view | reporting | frontend `/reporting/activity` | | `/aggregate` | `reporting/AggregateReport` | aggregate_report: view | reporting | frontend `/reporting/aggregate` | | `/test_assignments` | `reporting/TestAssignments` | test_assignment_report: view | reporting | frontend `/operations/test_assignments` | | `/session_explorer` | `reporting/SessionExplorer` | session_explorer: view | reporting | frontend `/operations/session_explorer` | | `/session_event_explorer` | `reporting/SessionEventExplorer` | session_event_explorer: view | reporting | frontend `/operations/session_event_explorer` | | `/results_explorer` | `reporting/ResultsExplorer` | results_explorer: view | reporting | frontend `/reporting/result_explorer` | | `/session_explorer/reporting_orgs_upload` | `reporting/components/BulkReportingOrgsUpload` | session_explorer: view, session_explorer_export: edit | reporting | frontend `/operations/session_explorer/bulk_reporting_orgs_upload` | | `/bulletin_board` | `system/Announcements` | announcements: view | system | frontend `/system/bulletins` | | `/bulletin_board/:id` | `system/EditAnnouncements` | announcements: view | system | frontend `/system/bulletins/:id` | | `/aggregate/test/:testID` | `reporting/AggregateReport` | aggregate_report: edit | reporting | frontend `/reporting/aggregate` | | `/aggregate/test/:testID/org/:orgID?` | `reporting/AggregateReport` | aggregate_report: edit | reporting | frontend `/reporting/aggregate` | | `/louisiana_reports` | `reporting/LouisianaReport` | louisiana_reports: view | reporting | none (legacy only) | | `/progress/:form_id/:school_id` | `reporting/ProgressClasses` | progress_report: edit | reporting | frontend `/reporting/progress/:testId` | | `/performance/:program_id?/:org_id?` | `reporting/performance/AssessmentPerformance` | performance_report: edit | reporting | superseded by `/performance_v2` here and frontend `/performance/...` | | `/performance_v2/:program_code?/:org_id?` | `reporting/performance_v2/AssessmentPerformanceV2` | performance_report: view | reporting | frontend `/performance/:program_code?/:org_id?` | | `/performance/detail/:scope_Id/:test_id` | `reporting/performance/IndividualAssessmentPerformanceReport` | performance_report: edit | reporting | superseded by `/performance_v2` here and frontend `/performance/...` | | `/performance/detail/:scope_id/:test_id/:view` | `reporting/performance/IndividualAssessmentPerformanceReport` | performance_report: view | reporting | superseded by `/performance_v2` here and frontend `/performance/...` | | `/performance_v2/detail/:scope_identifier/:test_identifier/:program_code/:view?` | `reporting/performance_v2/IndividualAssessmentPerformanceReportV2` | performance_report: view | reporting | frontend `/performance/detail/...` | | `/performance/battery/:programId/:batteryId/:scopeId` | `reporting/performance/PerformanceBatteryReport` | performance_report: view | reporting | superseded by `/performance_v2` here and frontend `/performance/...` | | `/performance_v2/battery/:programCode/:batteryCode/:scopeIdentifier/:view?` | `reporting/performance_v2/PerformanceBatteryReportV2` | performance_report: view | reporting | frontend `/performance/battery/...` | | `/performance_by/:entity_type/:program_code/:test_identifier/:school_identifier/:view?` | `reporting/performance_v2/PerformanceByEntity` | login only | reporting | frontend `/performance_by/...` (same path) | | `/performance/program/:program_id/:scope_id` | `reporting/performance/ProgramReport` | performance_report: view | reporting | superseded by `/performance_v2` here and frontend `/performance/...` | | `/performance_v2/program/:program_code/:scope_identifier/:view?` | `reporting/performance_v2/ProgramReportV2` | performance_report: view | reporting | frontend `/performance/program/...` | | `/client_settings` | `system/ClientEdit` | client_settings: view | system | frontend `/system/clients`; admin-ui `/tenants/:id` | | `/clients/:id` | `system/ClientEdit` | client_settings: view | system | frontend `/system/clients`; admin-ui `/tenants/:id` | | `/role_config` | `system/RoleConfig` | roles: view | system | frontend `/system/roles` | | `/admin_requests` | `system/AdminRequests` | accept_request: view | system | frontend `/system/requests` | | `/admin_request/:id` | `system/AdminRequest` | submit_request: view | system | frontend `/system/requests/:id`, `/system/admin_request/:id` | | `/downloads/:type?` | `system/Downloads` | login only | system | frontend `/common/downloads/:type?` | | `/academic_sessions` | `rostering/AcademicSessionConfig` | academic_sessions: view | rostering | frontend `/rostering/academic_sessions` | | `/academic_sessions/:id` | `rostering/AcademicSessionEdit` | academic_sessions: view | rostering | frontend `/rostering/academic_sessions` | | `/orgs` | `rostering/OrgConfig` | orgs: view | rostering | frontend `/rostering/orgs` | | `/orgs/:id` | `rostering/OrgEdit` | orgs: view | rostering | frontend `/rostering/orgs` | | `/org_import` | `rostering/OrgImport` | orgs: edit | rostering | frontend `/rostering/orgs/org_import` | | `/courses` | `rostering/CourseConfig` | courses: view | rostering | frontend `/rostering/courses` | | `/courses/:id` | `rostering/CourseEdit` | courses: view | rostering | frontend `/rostering/courses` | | `/classes` | `rostering/ClassConfig` | classes: view | rostering | frontend `/rostering/classes` | | `/classes/quick_upload` | `rostering/QuickClassUpload` | classes: view | rostering | frontend `/rostering/class/quick_upload` | | `/classes/:id` | `rostering/ClassEdit` | classes: view | rostering | frontend `/rostering/classes` | | `/classes/:id/print_cards` | `rostering/StudentCardPrint` | classes: view | rostering | frontend `/rostering/classes/:classId/print-cards/:fieldSetId` | | `/users` | `rostering/UserConfig` | users: view | rostering | frontend `/rostering/users` | | `/user_import` | `rostering/NonStudentUserImport` | users: view, non_student_user_import: edit | rostering | frontend `/rostering/admin_user_import` | | `/users/user_import` | `rostering/UserImportConfig` | users: view, user_import: edit | rostering | frontend `/rostering/user_import` | | `/users/accommodation_upload` | `rostering/StudentAccommodationUpload` | users: view, user_accommodations: edit | rostering | frontend `/rostering/accommodation_upload` | | `/users/assignment_tags_upload` | `rostering/AssignmentTagUpload` | users: view, student_assignment_tags: edit | rostering | frontend `/rostering/assignment_tags_upload` | | `/users/user_metadata_upload` | `rostering/UserMetadataUpload` | users: view, user_metadata_upload: edit | rostering | frontend `/rostering/user_metadata_upload` | | `/users/:id` | `rostering/UserEdit` | users: view | rostering | frontend `/rostering/users` | | `/my_classes/learnosity` | `class_list/assessment_report/my_classes/MyClasses` | pear_my_classes: view | class_list | none (Learnosity, legacy only) | | `/my_classes` | `class_list/ClassList` | pear_my_classes: view | class_list | frontend `/home/my_classes` | | `/student_performance/dashboard/:schoolId?` | `test_performance/Dashboard` | test_performance_report: view | test_performance | frontend `/student_performance/dashboard/...` | | `/student_performance_v2/dashboard/:schoolIdentifier?` | `student_performance/DashboardV2` | test_performance_report: view | student_performance | frontend `/student_performance/dashboard/...` | | `/student_performance/:programId/:testId/:schoolId/:view?` | `test_performance/ComparisonReport` | test_performance_report: view | test_performance | frontend `/student_performance/...` | | `/student_performance_v2/:program_code/:test_identifier/:school_identifier/:view?` | `student_performance/ComparisonReportV2` | rolesOr: student_performance_report:view OR test_performance_report:view | student_performance | frontend `/student_performance/...` | | `/student_performance_battery/:programId/:batteryId/:schoolId/` | `test_performance/StudentPerformanceBatteryReport` | login only | test_performance | frontend `/student_performance_battery/...` | | `/student_performance_battery_v2/:programCode/:batteryCode/:schoolIdentifier/:view?` | `student_performance/StudentPerformanceBatteryReportV2` | login only | student_performance | frontend `/student_performance_battery/...` | | `/my_tests` | `classroom/MyTests` | my_tests: view | classroom | none (legacy only) | | `/student_assignments/:programId?` | `student_assignments/StudentAssignmentsDashboard` | student_assignments: view | student_assignments | frontend `/home/student_assignments` | | `/assignment_details/:programId/:batteryId/:adminId/:scopeId?` | `student_assignments/AssignmentDetails` | login only | student_assignments | frontend `/home/assignment_details/...` | | `/class_assignments` | `class_assignments/ClassAssignmentsTeacherList` | class_assignments: view | class_assignments | frontend `/home/class_assignments` | | `/class_assignments/new` | `class_assignments/ClassAssignmentEdit` | class_assignments: view | class_assignments | frontend `/home/class_assignments` | | `/class_assignments/:id` | `class_assignments/ClassAssignmentEdit` | class_assignments: view | class_assignments | frontend `/home/class_assignments` | | `/my_tests/:classId/report/:assessmentId/` | `class_list/assessment_report/AssessmentReport` | login only | class_list | none (legacy only) | | `/my_tests/:classId/report/:assessmentId/:view/:userId?` | `class_list/assessment_report/AssessmentReport` | login only | class_list | none (legacy only) | | `/my_classes/learnosity/:id` | `class_list/assessment_report/my_classes/MyClass` | pear_my_classes: view | class_list | none (Learnosity, legacy only) | | `/my_classes/learnosity/:class_id/admin/:admin_id` | `class_list/assessment_report/my_classes/MyClassesAdmin` | pear_my_classes: view | class_list | none (Learnosity, legacy only) | | `/my_classes_a/:class_id/admin/:admin_id` | `class_list/assessment_report/my_classes/MyClassesAnalysis` | pear_my_classes: view | class_list | none (Learnosity, legacy only) | | `/my_classes/:classId/assignments/:assignmentId/admins/:adminId/sessions/:sessionId/test_player` | `ADTestPlayer` | pear_my_classes: view | shell | tester-ui `/class_test` | | `/banks` | `test_management/BankConfig` | login only | test_management | none (legacy authoring only) | | `/banks/:id` | `test_management/BankEdit` | login only | test_management | none (legacy authoring only) | | `/tests` | `test_management/TestConfig` | tests: view | test_management | frontend `/test_management/tests` | | `/tests/:id` | `test_management/TestEdit` | tests: view | test_management | frontend `/test_management/tests` | | `/field_sets/` | `test_management/FieldSetsConfig` | field_sets: view | test_management | frontend `/test_management/field_sets` | | `/field_sets/:id` | `test_management/FieldSetsEdit` | field_sets: view | test_management | frontend `/test_management/field_sets` | | `/program_configs/` | `test_management/ProgramConfig` | program_configs: view | test_management | frontend `/test_management/program_configuration` | | `/program_configs/:id` | `test_management/ProgramEdit` | program_configs: view | test_management | frontend `/test_management/program_configuration` | | `/program_configs/:programId/battery/:batteryId` | `test_management/ProgramBatteryObjectives` | login only | test_management | frontend `/test_management/program_configuration` | | `/reporting_thresholds/` | `test_management/ReportingThresholdsConfig` | login only | test_management | none (legacy only) | | `/reporting_thresholds/:id` | `test_management/ReportingThresholdEdit` | login only | test_management | none (legacy only) | | `/test_publish_orgs` | `test_publish/TestPublishByOrgConfig` | test_publish_orgs: view | test_publish | frontend `/test_management/test_publish_orgs` | | `/test_publish_orgs/:id` | `test_publish/TestPublishByOrgEdit` | test_publish_orgs: view | test_publish | frontend `/test_management/test_publish_orgs` | | `/test_publish_tests` | `test_publish/TestPublishByTestConfig` | test_publish_tests: view | test_publish | none (legacy only) | | `/test_publish_tests/:id` | `test_publish/TestPublishByTestEdit` | test_publish_tests: view | test_publish | none (legacy only) | | `/eu_admins/scheduled` | `test_management/EndUserAdmins` | administrations: view | test_management | frontend `/test_management/administrations[/wizard/:type/:id]` | | `/eu_admins/training_scheduled` | `test_management/EndUserAdmins` | training_administrations: view | test_management | frontend `/test_management/training_administration/...` | | `/eu_admins/dynamic` | `test_management/EndUserAdmins` | deliveries: view | test_management | none (dynamic deliveries, legacy only) | | `/eu_admins/practice` | `test_management/EndUserAdmins` | practice_tests: view | test_management | frontend `/test_management/practice` | | `/print_cards/:adminID/:classID/:pgID` | `test_management/SessionCardPrint` | login only | test_management | frontend `/operations/print_session_cards/...` | | `/print_cards/:adminID/:classID/my_class` | `test_management/SessionCardPrint` | login only | test_management | frontend `/operations/print_session_cards/...` | | `/print_cards/:adminID/:classID/:pgID/:schoolID` | `test_management/SessionCardPrint` | login only | test_management | frontend `/operations/print_session_cards/...` | | `/proctor_cards/:adminID/:classID/:pgID` | `test_management/ProctorCardPrint` | login only | test_management | frontend `/operations/proctor_group_print_cards/...` | | `/proctor_cards/:adminID/:classID/:pgID/:schoolID` | `test_management/ProctorCardPrint` | login only | test_management | frontend `/operations/proctor_group_print_cards/...` | | `/admins/:id` | `test_management/AdminEdit` | administrations: view | test_management | frontend `/test_management/administrations[/wizard/:type/:id]` | | `/admin_wizard/scheduled/:id` | `test_management/AdminWizard` | administrations: view | test_management | frontend `/test_management/administrations[/wizard/:type/:id]` | | `/admin_wizard/training_scheduled/:id` | `test_management/AdminWizard` | training_administrations: view | test_management | frontend `/test_management/training_administration/...` | | `/admin_wizard/dynamic/:id` | `test_management/AdminWizard` | deliveries: view | test_management | none (dynamic deliveries, legacy only) | | `/admin_wizard/practice/:id` | `test_management/AdminWizard` | practice_tests: view | test_management | frontend `/test_management/practice` | | `/deliveries/:id/proctor_groups` | `test_management/ProctorGroupsDeliveries` | login only | test_management | none (dynamic deliveries, legacy only) | | `/admins/:id/proctor_groups` | `test_management/ProctorGroupsAdministrations` | login only | test_management | frontend `/test_management/administrations/:adminID/...` | | `/admins/:adminID/proctor_groups/alias/:proctorGroupID` | `test_management/ProctorGroupAliasEdit` | login only | test_management | frontend `/test_management/administrations/:adminID/...` | | `/deliveries/:adminID/proctor_groups/:proctorGroupID` | `test_management/ProctorGroupDeliverySessions` | login only | test_management | none (dynamic deliveries, legacy only) | | `/admins/:adminID/proctor_groups/:proctorGroupID` | `test_management/ProctorGroupDeliverySessions` | login only | test_management | frontend `/test_management/administrations/:adminID/...` | | `/deliveries/:adminID/sessions` | `test_management/DeliverySessions` | login only | test_management | none (dynamic deliveries, legacy only) | | `/admins/:adminID/sessions` | `test_management/AdministrationSessions` | login only | test_management | frontend `/test_management/administrations/:adminID/...` | | `/training_admins/:adminID/sessions` | `test_management/AdministrationSessions` | training_administrations: view | test_management | frontend `/test_management/training_administration/...` | | `/training_admins/:adminID/proctor_groups/:proctorGroupID` | `test_management/ProctorGroupDeliverySessions` | training_administrations: view | test_management | frontend `/test_management/training_administration/...` | | `/training_admins/:id/proctor_groups` | `test_management/ProctorGroupsTrainings` | login only | test_management | frontend `/test_management/training_administration/...` | | `/training_admins/:adminID/proctor_groups/alias/:proctorGroupID` | `test_management/ProctorGroupAliasEdit` | login only | test_management | frontend `/test_management/training_administration/...` | | `/training_admins/:adminID/upload` | `test_management/ProctorGroupUpload` | training_administrations: view | test_management | frontend `/test_management/training_administration/...` | | `/admins/:adminID/upload` | `test_management/ProctorGroupUpload` | administrations: view | test_management | frontend `/test_management/administrations/:adminID/...` | | `/proctor` | `test_management/ProctorLogin` | public (skipRoutes) | test_management | tester-ui `/proctor`, `/proctor/pg/:id` | | `/proctor/pg/:id` | `test_management/Proctor` | login only | test_management | tester-ui `/proctor`, `/proctor/pg/:id` | | `/remote_proctor/pg/:id` | `test_management/RemoteProctor` | login only | test_management | tester-ui `/proctor`, `/proctor/pg/:id` | | `/proctoring` | `test_management/Proctoring` | login only | test_management | tester-ui `/proctor`, `/proctor/pg/:id` | | `/landing` | `Landing` | login only | shell | frontend `/home/dashboard` | | `/author_items` | `authoring/Items` | login only | authoring | none (Learnosity authoring, legacy only) | | `/item/:bankID/:itemID` | `authoring/ItemEditNav` | login only | authoring | none (Learnosity authoring, legacy only) | | `/item/:bankID/:itemID/no_nav` | `authoring/ItemEditNoNav` | login only | authoring | none (Learnosity authoring, legacy only) | | `/item_view/:bankID/:itemID` | `authoring/ItemView` | login only | authoring | none (Learnosity authoring, legacy only) | | `/author_forms` | `authoring/Forms` | login only | authoring | none (Learnosity authoring, legacy only) | | `/forms/:bankID/:formID` | `authoring/FormsEdit` | login only | authoring | none (Learnosity authoring, legacy only) | | `/admin_reports/:id` | `authoring/AdminReport` | login only | authoring | none (Learnosity authoring, legacy only) | | `/author_passages` | `authoring/Passages` | login only | authoring | none (Learnosity authoring, legacy only) | | `/passages/:bankID/:passageID` | `authoring/PassageEdit` | login only | authoring | none (Learnosity authoring, legacy only) | | `/form_print/:formID/:activityID` | `authoring/FormPrint` | login only | authoring | none (Learnosity authoring, legacy only) | | `/item_print/:bankID/:itemID` | `authoring/ItemPrint` | login only | authoring | none (Learnosity authoring, legacy only) | | `/qti_banks` | `qti/QTIBankList` | qti_banks: view | qti | frontend `/authoring/banks` | | `/qti_banks/:id` | `qti/QTIBankEdit` | qti_banks: view | qti | frontend `/authoring/banks` | | `/qti_items` | `qti/QTIItemListv2` | qti_items_v2: view | qti | frontend `/authoring/items` | | `/qti_items/:bankID/:itemID` | `qti/v2/ItemEditV2` | qti_items_v2: view | qti | frontend `/authoring/items` | | `/qti_resources` | `qti/QTIResourceList` | qti_items_v2: view | qti | frontend `/authoring/resources` | | `/qti_resources/:bankID/:id` | `qti/QTIResourceEdit` | qti_items_v2: view | qti | frontend `/authoring/resources` | | `/qti_shared_stims` | `qti/QTISharedStimListV2` | qti_shared_stims: view | qti | frontend `/authoring/shared_stim` | | `/qti_shared_stims/:bankID/:id` | `qti/QTISharedStimEditV2` | qti_shared_stims: view | qti | frontend `/authoring/shared_stim` | | `/qti_forms` | `qti/QTIFormList` | qti_forms: view | qti | frontend `/authoring/qti_forms` | | `/form_sync` | `qti/QTIFormSync` | qti_forms: view | qti | frontend `/testnav/testnav_form_sync` (closest) | | `/qti_forms/:bankID/:id` | `qti/QTIFormEdit2` | qti_forms: view | qti | frontend `/authoring/qti_forms` | | `/qti_media` | `qti/QTIMediaList` | qti_media: view | qti | frontend `/authoring/media_styles` (closest) | | `/qti_media/:bankID/:id` | `qti/QTIMediaEdit` | qti_media: view | qti | frontend `/authoring/media_styles` (closest) | | `/qti_sessions` | `qti/QTISessionsList` | login only | qti | none (legacy only) | | `/my_classes/:classId/:programId?` | `class_list/class_overview/ClassOverview` | login only | class_list | frontend `/home/my_classes` | | `/my_classes/:classId/report/:assessmentId/` | `class_list/assessment_report/AssessmentReport` | login only | class_list | frontend `/home/my_classes` | | `/my_classes/:classId/report/:assessmentId/:view/:userId?` | `class_list/assessment_report/AssessmentReport` | login only | class_list | frontend `/home/my_classes` | | `/scoring/schools/:schoolId/assessments/:assessmentId` | `class_list/assessment_report/AssessmentReport` | login only | class_list | frontend `/scoring/schools/...` (same path) | | `/scoring/schools/:schoolId/assessments/:assessmentId/admins/:adminId/:userId?` | `class_list/assessment_report/AssessmentReport` | login only | class_list | frontend `/scoring/schools/...` (same path) | | `/new_test` | `classroom/NewTestPage` | login only | classroom | none | | `/my_classes/:classId/student_details/:userId/:unenrolled?` | `class_list/class_overview/ClassOverview` | login only | class_list | frontend `/home/my_classes` | | `/file_upload` | `file_io/FileUpload` | rostering.uploads: edit | file_io | none (legacy only; frontend uses per-entity imports under `/rostering`) | | `/my_classes/:classId/program/:programId/student_report/:studentId?` | `class_list/student_report/StudentReport` | login only | class_list | frontend `/home/my_classes` | | `/isr/:schoolId/:programId/:studentId?` | `class_list/student_report/StudentReport` | login only | class_list | frontend ISR via `/performance/...` (see fe-isr-ui) | | `/report_assets` | `report_assets/ReportAssets` | report_assets: view | report_assets | frontend `/reporting/report_assets` | | `/my_classes/:classId/class_assignments/:classAssignmentId/admins/:assessmentId/:view/:userId?` | `class_list/assessment_report/AssessmentReport` | login only | class_list | frontend `/home/my_classes` | | `/ad_banks` | `qti/ad/ADBankList` | ad_banks: view | qti | frontend `/authoring/banks` | | `/ad_banks/:id` | `qti/QTIBankEdit` | ad_banks: view | qti | frontend `/authoring/banks` | | `/ad_items` | `qti/ad/ADItemList` | ad_items: view | qti | frontend `/authoring/items` | | `/ad_items/:bankID/:itemID` | `qti/v2/ADItemEdit` | ad_items: view | qti | frontend `/authoring/items` | | `/ad_resources` | `qti/ad/ADResourceList` | ad_items: view | qti | frontend `/authoring/resources` | | `/ad_resources/:bankID/:id` | `qti/ADResourceEdit` | ad_items: view | qti | frontend `/authoring/resources` | | `/ad_shared_stims` | `qti/ad/ADSharedStimList` | ad_shared_stims: view | qti | frontend `/authoring/shared_stim` | | `/ad_shared_stims/:bankID/:id` | `qti/ADSharedStimEdit` | ad_shared_stims: view | qti | frontend `/authoring/shared_stim` | | `/ad_statistics` | `qti/ad/ADStatsList` | ad_statistics: view | qti | frontend `/authoring/statistics` | | `/ad_statistics/:bankID/:itemID` | `qti/ad/ADStatsItem` | ad_statistics: view | qti | frontend `/authoring/statistics` | | `/ad_forms` | `qti/ad/ADFormList` | ad_forms: view | qti | frontend `/authoring/qti_forms` | | `/ad_forms/:bankID/:id` | `qti/ADFormEdit` | ad_forms: view | qti | frontend `/authoring/qti_forms` | | `/ad_media` | `qti/ad/ADMediaList` | ad_media: view | qti | frontend `/authoring/media_styles` (closest) | | `/ad_media/:bankID/:id` | `qti/ADMediaEdit` | ad_media: view | qti | frontend `/authoring/media_styles` (closest) | | `/distributions_config` | `orders/DistributionsConfig` | distributions_config: view | orders | frontend `/orders/distributions_config` | | `/manage_orders` | `orders/ManageOrders` | manage_orders: view | orders | frontend `/orders/manage_orders` | | `/shipment_tracking` | `orders/ShipmentTracking` | shipment_tracking: view | orders | frontend `/orders/shipment_tracking` | | `/order_reports` | `orders/OrderReports` | order_reports: view | orders | frontend `/orders/reports` | | `/online_order_reports` | `orders/OnlineOrderReports` | online_order_reports: view | orders | frontend `/orders/reports` | | `/orders_exports` | `orders/OrdersExports` | orders_exports: view | orders | frontend `/orders/order_exports` | | `/rejected_tests` | `rejected_tests/RejectedTests` | rejected_tests: view | rejected_tests | frontend `/operations/rejected_tests` | | `/students/:studentId` | `student_dashboard/StudentDashboard` | student_dashboard: view | student_dashboard | frontend `/students/:studentId` (same path) | ## Gotchas - Lists are **POST** `/v2/` with a paging body (`base_service.query`); `PUT /v2/` is create-or-update. Do not "fix" to GET. - The guard trusts `role_obj` from `/v2/me`; hiding a route is UX only. Server guards live in each `*_api.go`. - `client/package.json` version is rewritten by CI (`sed` on `"version"`); `VersionService` compares it with the server's `/v2/version` and forces a reload when the server is newer - bumping the server without redeploying the client causes reload prompts. - Saving client settings (`ClientEdit`) **logs the user out** (`AuthService.logout()` in `finally`). - `Login.vue` calls `AuthService.logout()` on every mount (clears localStorage except sticky keys). - jQuery is global (`webpack.ProvidePlugin`); some views manipulate DOM directly. - Static files win over API routes in Go (`Serve` middleware runs before routing), so do not add files to `client/public` whose path collides with an API path (e.g. `/internal/...`). - Two route entries share name `scheduled`/`training_scheduled`/`dynamic`/`practice` (eu_admins and admin_wizard) - vue-router 3 warns; navigation by name is ambiguous. ## Related [[build-deploy]], [[api-server]], [[frontend-app]], [[admin-ui-app]], [[tester-ui-app]], [[auth]], [[role]].