Commit graph

178 commits

Author SHA1 Message Date
redmatrix
3b859aa9ef Implement permission checking for OAuth clients using the xperm table. Currently 'all' permissions are applied to OAuth clients which gives them the same rights as the channel owner and full access to API functions as the channel owner. However, individual permissions can now be created. These mirror the permission names from the normal permission table (although it isn't required that they do so). Lack of an xp_perm entry for the specified permission and lack of an 'all' override indicates permission denied. 2015-05-17 18:14:50 -07:00
redmatrix
d6f98e6511 product was a bad string to use because we may require it for e-commerce, and RED_PLATFORM is equally problematic for other reasons. 2015-05-13 16:01:00 -07:00
friendica
4383564777 doco updates 2015-04-19 21:39:45 -07:00
friendica
d5f4a19a77 add favorites/create and destroy to api 2015-04-19 20:37:24 -07:00
friendica
f315c55d32 api performance enhancer 2015-04-19 18:57:12 -07:00
friendica
185ce2da69 assorted fixes to api direct messages 2015-04-19 18:14:17 -07:00
friendica
6511d5ee2c some api cleanup 2015-04-19 17:39:17 -07:00
friendica
01efda6850 api - unobscure mail 2015-04-19 13:41:12 -07:00
friendica
0883512e30 log this since we may need it to track down failures 2015-04-18 17:40:44 -07:00
friendica
0ce8572fef remove failed experiment 2015-04-17 23:04:58 -07:00
friendica
e1b9053563 add last post to api/account/verify_credentials 2015-04-17 20:22:10 -07:00
friendica
f2127d4ba7 limit notification detail queries for items and events 2015-03-23 15:36:17 -07:00
friendica
62b2fa6ac7 operation snakebite, cont. 2015-03-22 20:30:23 -07:00
friendica
f660b7523b also update the api to match 2015-03-16 15:35:46 -07:00
Habeas Codice
972fc91e12 remove superfluous non-boolean boolean 2015-02-16 15:08:53 -08:00
friendica
da2349bb6a provide relief to sites that are severely impacted by the slow ITEM_UNSEEN searches. This does not incorporate any other flag optimisations as that will require a major DB update and possibly involve significant downtime. This is just to bite off a little chunk now and provide some much needed relief. 2015-02-12 17:45:25 -08:00
friendica
a496036066 local_user => local_channel 2015-01-28 20:56:04 -08:00
friendica
ee89ff5124 some improvements in api direct messages 2014-12-22 18:26:11 -08:00
friendica
f66df5e137 direct messages in api have some issues, not properly ported from friendica originally. Here's a start.
I think at best they may return encrypted gibberish currently, but let's work through them one at a time.
2014-12-22 18:05:34 -08:00
Habeas Codice
1a5a5c7edb PostgreSQL support initial commit
There were 11 main types of changes:
- UPDATE's and DELETE's sometimes had LIMIT 1 at the end of them. This is not only non-compliant but
it would certainly not do what whoever wrote it thought it would. It is likely this mistake was just
copied from Friendica. All of these instances, the LIMIT 1 was simply removed.
- Bitwise operations (and even some non-zero int checks) erroneously rely on MySQL implicit
integer-boolean conversion in the WHERE clauses. This is non-compliant (and bad programming practice
to boot). Proper explicit boolean conversions were added. New queries should use proper conventions.
- MySQL has a different operator for bitwise XOR than postgres. Rather than add yet another dba_
func, I converted them to "& ~" ("AND NOT") when turning off, and "|" ("OR") when turning on. There
were no true toggles (XOR). New queries should refrain from using XOR when not necessary.
- There are several fields which the schema has marked as NOT NULL, but the inserts don't specify
them. The reason this works is because mysql totally ignores the constraint and adds an empty text
default automatically. Again, non-compliant, obviously. In these cases a default of empty text was
added.
- Several statements rely on a non-standard MySQL feature
(http://dev.mysql.com/doc/refman/5.5/en/group-by-handling.html). These queries can all be rewritten
to be standards compliant. Interestingly enough, the newly rewritten standards compliant queries run
a zillion times faster, even on MySQL.
- A couple of function/operator name translations were needed (RAND/RANDOM, GROUP_CONCAT/STRING_AGG,
UTC_NOW, REGEXP/~, ^/#) -- assist functions added in the dba_
- INTERVALs: postgres requires quotes around the value, mysql requires that there are not quotes
around the value -- assist functions added in the dba_
- NULL_DATE's -- Postgres does not allow the invalid date '0000-00-00 00:00:00' (there is no such
thing as year 0 or month 0 or day 0). We use '0001-01-01 00:00:00' for postgres. Conversions are
handled in Zot/item packets automagically by quoting all dates with dbescdate().
- char(##) specifications in the schema creates fields with blank spaces that aren't trimmed in the
code. MySQL apparently treats char(##) as varchar(##), again, non-compliant. Since postgres works
better with text fields anyway, this ball of bugs was simply side-stepped by using 'text' datatype
for all text fields in the postgres schema. varchar was used in a couple of places where it actually
seemed appropriate (size constraint), but without rigorously vetting that all of the PHP code
actually validates data, new bugs might come out from under the rug.
- postgres doesn't store nul bytes and a few other non-printables in text fields, even when quoted.
bytea fields were used when storing binary data (photo.data, attach.data). A new dbescbin() function
was added to handle this transparently.
- postgres does not support LIMIT #,# syntax. All databases support LIMIT # OFFSET # syntax.
Statements were updated to be standard.

These changes require corresponding changes in the coding standards. Please review those before
adding any code going forward.

Still on my TODO list:
- remove quotes from non-reserved identifiers and make reserved identifiers use dba func for quoting
- Rewrite search queries for better results (both MySQL and Postgres)
2014-11-13 12:21:58 -08:00
friendica
241bb3b940 API: xchan get/create 2014-10-23 19:33:47 -07:00
friendica
e1f88fd15d jsonp support (thankxs fabrixxm) 2014-10-16 02:02:11 -07:00
friendica
d8c03526ed optionally include wall items (posts) in import/export 2014-09-25 20:21:23 -07:00
friendica
6ec12c66c3 red group/collection query calls for api 2014-09-11 21:41:45 -07:00
friendica
414d86d3a9 api - foreach warnings 2014-08-14 17:55:14 -07:00
friendica
b12e40a4e8 allow channel login to the api, just like with the cloud 2014-08-10 19:53:26 -07:00
friendica
ecb2e52a74 little fixes of hopefully nil significance 2014-03-16 20:34:21 -07:00
friendica
6f9fde997b this is the correct fix 2014-03-16 15:20:04 -07:00
Christian Vogeley
f0736fc955 API: statusnet_html:trim was trimming too much 2014-03-15 21:52:20 +01:00
friendica
267283748f Red API: /api/red/item/new ; which is like /api/statuses/update except it uses Red semantics and returns success/failure indication. 2014-03-04 19:57:54 -08:00
friendica
339a0f69c1 some tweaks to items_fetch for the api 2014-01-25 15:51:10 -08:00
friendica
6911439f0e Merge pull request #284 from cvogeley/master
API changes
2014-01-25 15:03:23 -08:00
Christian Vogeley
a25b8c951b Check user_info['self] in api user_timeline 2014-01-25 22:56:15 +01:00
Christian Vogeley
b71e855c5b remove wall restriction
original didn’t have that
2014-01-25 13:44:31 +01:00
Christian Vogeley
6b3ea9dc14 API My wall posts 2014-01-25 03:50:47 +01:00
friendica
bc98f4ddf4 fix api/red/photos when supplied with an album name 2014-01-22 23:04:19 -08:00
friendica
38fd8410eb split off mod_connections into mod_connections & mod_connedit - lots of links to fix 2013-12-18 01:00:08 -08:00
friendica
aab9b30d03 synchronise deletion of comments between red and wp 2013-11-28 00:16:13 -08:00
friendica
ef53c72a70 delete from the wp side as well as from the red side 2013-11-26 17:02:49 -08:00
friendica
6f6fcddfc3 api fixes 2013-11-26 16:38:48 -08:00
tuscanhobbit
2c6e1b7aee replaced rhash icon 2013-11-23 20:01:11 +01:00
friendica
100043da38 oauth wasn't logging in properly, also fixed api status_show to return last public post, not the last private post 2013-10-15 15:51:20 -07:00
friendica
a78b76d393 more work on viewing obscured api posts 2013-09-16 22:51:39 -07:00
friendica
c6d6c01fb6 use prepare_body in api calls to properly render content, add 'mode' to conversation templates so that themes can use the module context to suppress or show comments as desired 2013-09-16 22:40:53 -07:00
friendica
9bff739d96 several oauth fixes - shred doesn't completely work yet, but it also doesn't completely NOT work, so at least there's some improvement 2013-09-16 21:35:52 -07:00
friendica
e45beccd5b fix media uploads in api (specifically friendica for android) 2013-07-25 05:04:52 -07:00
friendica
6f1db253f3 use (numeric) abook_id for friends/followers in Twitter API. Many existing clients won't be able to handle xchans. Save those for the Red specific API. 2013-07-18 18:10:03 -07:00
friendica
94e87c0a84 update friends/followers API so Friendica Android client won't choke 2013-07-17 21:53:35 -07:00
friendica
fadf2c3ea6 add photos and albums enumeration to Red API (will allow us to export either all our photos or individual albums using a script) 2013-05-29 19:47:01 -07:00
friendica
df32c93d56 zidify img links, delay notifier until actually published for time travelling posts 2013-05-27 05:27:35 -07:00