38 commits

Author	SHA1	Message	Date
Mike Macgirvin	25a69b236b	new auth work	2023-07-29 11:07:38 +10:00
Mike Macgirvin	772a63e2e5	add remote auth HTTP_AUTHORIZATION missing fix to api_auth.	2023-07-29 08:43:46 +10:00
Mike Macgirvin	e7fd93f3a2	cleanup	2022-12-31 05:41:02 +11:00
Mike Macgirvin	ee743514f8	remove redundant oauth server options	2022-12-30 20:13:33 +11:00
Mike Macgirvin	06b51d1f86	add refresh token grant type	2022-12-29 19:07:40 +11:00
Mike Macgirvin	9e66a1bbdc	OAuth2 updates	2022-12-18 21:12:28 -08:00
Mike Macgirvin	9b4585a13c	cleanup	2022-10-21 20:37:20 +11:00
Mike Macgirvin	35e02f25d6	begin hubloc refactor	2022-06-16 19:46:54 -07:00
nobody	aab6ce8e97	cleanup	2022-03-15 02:02:44 -07:00
nobody	7cab493e6c	php 8.1 changes	2022-03-15 01:42:34 -07:00
nobody	a8e96322f0	it's done	2022-02-15 20:08:28 -08:00
nobody	6d6f65bdf7	refactor Socgraph	2022-02-14 11:55:01 -08:00
nobody	4dd986a2db	This checkin is surely broken, but I need to commit it because it represents a fair bit of work.	2022-02-12 00:50:48 -08:00
nobody	ad52373312	move account and channel to zlib	2022-01-24 17:26:12 -08:00
nobody	d46dd6aeb8	psr12 rewrites, continued	2021-12-03 14:01:39 +11:00
nobody	e57c1fd182	more php8	2021-03-08 21:52:10 -08:00
nobody	673822e946	provide content_import in core and run it automatically if you choose to import posts when creating a clone. So one step import *if* you import from a site instead of a file (yay - finally). This required slight modifications to api_auth because it always looked for a cached identity and in this case the identity was just created and will not yet be in cache.	2020-12-10 16:32:29 -08:00
zotlabs	232bd025f3	typo	2019-06-12 20:57:28 -07:00
zotlabs	7428e1358e	cleanup	2019-05-14 22:16:49 -07:00
zotlabs	a5455fa049	add personal filter and fix api zot-auth	2018-10-07 15:51:52 -07:00
zotlabs	4fdf5d28ca	minor oauth2 updates - renamed zot webbie to 'webfinger' and zothash to 'portable_id', fixed/simplified cgi auth mode	2018-08-13 17:24:48 -07:00
Andrew Manning	45e0fc6802	Successful OAuth2 sequence demonstrated with the test vehicle, including an authenticated API call using an access_token.	2018-02-26 18:16:43 -05:00
zotlabs	85b7c90637	strip acct: from OWA auth to API endpoints	2017-12-07 18:56:26 -08:00
zotlabs	499b7de0d2	Reviewed. This is OK. ... Revert "may be exploitable in current form - awaiting review" This reverts commit 7bff60edac.	2017-09-03 00:59:51 -07:00
zotlabs	7bff60edac	may be exploitable in current form - awaiting review	2017-09-02 14:04:37 -07:00
zotlabs	ae8cdc3b42	some changes after testing server-to-server magic auth	2017-08-31 21:38:03 -07:00
zotlabs	b413beeb36	add server-to-server magic auth to dav and cdav controllers	2017-08-31 20:45:13 -07:00
zotlabs	0cf5536e90	server to server magic auth	2017-08-31 20:08:58 -07:00
zotlabs	5e767144c9	simplify api_auth	2017-08-31 19:09:07 -07:00
redmatrix	2fb4952137	issue #460	2016-07-25 13:27:17 -07:00
redmatrix	3affb2e817	sort out some of the authentication mess - with luck this may fix the DAV auth issue which I simply could not duplicate or find a reason for.	2016-07-20 17:55:40 -07:00
redmatrix	9abd95fad3	static App	2016-03-31 16:06:03 -07:00
redmatrix	bb0e4044bf	remove the unqualified "OAuth" namespace from the project. We need to reference either OAuth1 or OAuth2.	2015-12-13 15:35:45 -08:00
redmatrix	395268da22	a couple of api improvements	2015-12-11 21:10:20 -08:00
redmatrix	8389d8677d	some major cleanup of api authentication stuff - still needs much more and this still may not solve #206	2015-12-10 16:39:46 -08:00
redmatrix	0f4ceedbb4	remove duplicated code	2015-12-08 20:47:55 -08:00
redmatrix	656e5fd052	use killme() instead of die() so that any sessions are closed cleanly.	2015-12-08 20:42:46 -08:00
ken restivo	ddce0412ac	Move api_auth() out to a file that can be included from plugins/modules to allow them to expose their own programmatic API.	2015-11-10 22:50:18 -08:00