Using API endpoints for Quizzes

MarilouLandes

I am developing an external app that starts a quiz, retrieves the questions, then saves/updates the responses, and finally, completes the quiz, using various API Endpoints.  There does not appear to be any type of workflow documentation for this process, so my methodology is basically to "try this and see what happens".

For all the following, Shibboleth authentication is used, and an OAuth2 workflow is completed successfully.

Using my personal credentials as an administrator, I am able to

1. list quizzes in a course,
2. create a quiz submission for a quiz in a course, and
3. get Quiz Questions for a specific quiz in a course (GET /api/v1/courses/:courseID/quizzes/:quizID/questions)

Using a test student account, I am able to

1. list quizzes in a course,
2. create a quiz submission for a quiz in a course, and
3. I am unable to get Quiz Questions for a specific quiz in a course.  The response is {"status":"unauthorized","errors":[{"message":"user not authorized to perform that action"}]}

The have several questions:

1. Is there some workflow-type documentation that describes how the various endpoints should be used?
2. Am I using the correct endpoint for the student to retrieve the quiz qestions?
3. Are there (script) examples of this process that anyone is willing to share from which I can learn?

Thanks for any and all feedback!

James

This is an interesting idea. I can see where it would come in handy for students in courses that allow unlimited attempts and keep the highest grade (like our mandatory student orientation course). Students could run the script until they get a high grade without having to know anything. Thankfully, New Quizzes allows you to enforce a waiting period before reattempting a quiz and that would definitely come in handy here.

The Quiz Questions API has lots of gotchas. I've got about 30 seconds before I have to pack up and go, so I won't get to all of them.

Has the test student taken the quiz?

Are you specifying the quiz submission ID and the quiz attempt? Otherwise, it's going to fall through to the next line of code that does the check for authorization, which is the error you're getting. If so, are you confusing the quiz submission ID with the assignment submission ID or the quiz ID?

Quiz Questions from an administrator account doesn't return all of the questions in the quiz if you use question banks, but it will return some questions. For students, they need to have started the quiz, otherwise a student could get a list of all of the questions ahead of time.