Commit Graph

59 Commits

Author SHA1 Message Date
Michael dd55ba2d77 Issue 13949: Block access via OAuth 2024-02-29 22:03:57 +00:00
Michael 89e7420237 Friendica copyright changed from 2023 to 2034 2024-01-02 20:57:26 +00:00
Hank Grabowski 35a726a961 Use strtok to find QP's in Uri for OAuth redirect processing 2023-11-06 11:25:13 -05:00
Hypolite Petovan 1b9ec3a214 Rename BaseApi->logErrorAndJsonExit to logAndJsonError to better match the functionality
- Also it's shorter and we're paying by the character
2023-10-11 09:44:03 -04:00
Hypolite Petovan 6a2ca1a6b6 Move jsonError out of Factory\Api\Mastodon\Error->Unauthorized 2023-10-11 09:44:03 -04:00
Hypolite Petovan 7486ebdc10 Move jsonError out of Factory\Api\Mastodon\Error->UnprocessableEntity 2023-10-11 09:44:03 -04:00
Hypolite Petovan 81279dad9e Move System::jsonExit to BaseModule->jsonExit
- This will ensure headers set in BaseModule->run will be carried in jsonExit scenarios
- Deprecate jsonExit() method in Core\System
2023-09-24 07:08:15 -04:00
Michael 6fd4839441 Reformatted code 2023-07-23 20:20:46 +00:00
Michael 61af2e8006 Issue 13020: Fix OAuth connection with Buffer 2023-07-23 20:05:10 +00:00
Michael 101b3c9703 First implementation of ActivityPub C2S 2023-01-29 14:41:14 +00:00
Michael 575fb52438 Fetch data from basic auth when one of the parameters is missing 2023-01-22 14:44:57 +00:00
Hypolite Petovan d2033d4c92 Allow colon in password
- It was disallowed because of a too strict intepretation of RFC2617
2023-01-18 20:34:20 -05:00
Michael af2a38c5b3 API: Accept "redirect_uris" as both array and string 2023-01-14 21:07:47 +00:00
Hypolite Petovan 1874a32728 Happy New Year 2023! 2023-01-01 09:36:24 -05:00
Philipp Holzer 4f1bb0d274
Use X-REQUEST-ID for Error pages 2022-12-26 21:18:05 +01:00
Philipp Holzer eecc456e0c
UserSession class [5] - Refactor src/Module/ files with DI 2022-10-20 22:59:39 +02:00
Michael ae6d67ed1f old boot.php functions replaced in src/module (3) 2022-10-19 09:14:24 -04:00
Michael f7b85092b0 Some more changed log levels 2022-08-31 05:01:22 +00:00
Philipp 322b7c856c
Merge pull request #11129 from urbalazs/copyright-2022
Update copyright
2022-01-02 09:45:35 +01:00
Balázs Úr e56a53647b Update copyright 2022-01-02 08:27:47 +01:00
Michael 47e9aa6338 API: Fix for OAuth endpoints that mustn't be authorized 2021-12-17 15:25:04 +00:00
Hypolite Petovan 80da47921e Replace references to UTC_TIMESTAMP in SQL queries with a DateTimeFormat generated parameter 2021-12-04 17:53:08 -05:00
Philipp Holzer 2e4d654c0a Make $_REQUEST processing independent of sub-calls
- Move HTTPInputData::process() into App::runFrontend()
- Pass $_REQUEST (including processed Input) to every Module method
- Delete $_POST parameters at Module post() calls because of $_REQUEST
2021-11-30 01:07:58 -05:00
Philipp Holzer f580d8e5c0 extract "BaseApi::checkDefaults()" method for later usage 2021-11-30 01:07:57 -05:00
Hypolite Petovan 9cc675233d Add a second parameter to BaseApi::getRequest to enable API tests 2021-11-27 18:38:09 -05:00
Philipp Holzer 056702c1e0
Fixing wrong inherited methodsyntax 2021-11-27 19:58:24 +01:00
Philipp Holzer 8bdd90066f
Make `BaseModule` a real entity
- Add all dependencies, necessary to run the content (baseUrl, Arguments)
- Encapsulate all POST/GET/DELETE/PATCH/PUT methods as protected methods inside the BaseModule
- Return Module content ONLY per `BaseModule::run()` (including the Hook logic there as well)
2021-11-27 12:40:36 +01:00
Philipp Holzer 489cd0884a
Make BaseModule methods dynamic 2021-11-14 23:49:06 +01:00
Philipp Holzer 714f0febc4
Replace `$parameters` argument per method with `static::$parameters` 2021-11-14 23:49:05 +01:00
Michael Vogel a256f18159
Update src/Module/OAuth/Token.php
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2021-06-16 22:19:26 +02:00
Michael 6b3476409a Check for REDIRECT_REMOTE_USER as well 2021-06-16 19:39:51 +00:00
Michael 5e22704f7e API: Added OAuth revoke, adding documentation to parameters 2021-06-16 19:24:44 +00:00
Michael 0b9c934cad Simplify the code 2021-06-10 07:02:06 +00:00
Michael d917ed58a8 API: Tests with various clients, small fixes 2021-06-10 06:26:34 +00:00
Michael acbe9ebf9e API: New classes for OAuth and basic auth 2021-06-08 06:32:24 +00:00
Michael a5c8c4d8b7 Fixes notice 2021-05-22 15:41:25 +00:00
Michael e3d227f3c9 API: Parameter cleanup 2021-05-19 06:18:42 +00:00
Michael 0aaaf8d6ef API: Support OAuth client credentials 2021-05-14 06:05:01 +00:00
Michael 8b841dfa50 Fix connection issues with AndStatus 2021-05-13 22:00:40 +00:00
Michael 3aa883f1e3 API: List handling, dummy endpoints 2021-05-13 21:15:32 +00:00
Michael b18073d5a8 Repurposed OAuth frontend handling, store the scope 2021-05-13 14:58:55 +00:00
Michael 7975bc244d Refine OAuth flow 2021-05-13 11:26:56 +00:00
Michael 9125d296a1 Improved error messages 2021-05-12 14:00:15 +00:00
Michael 8a5560ec8f Simplified null check 2021-05-12 12:40:45 +00:00
Michael 8dccb66dec Display the application name 2021-05-12 12:19:15 +00:00
Michael 87f7e26638 Added documentation 2021-05-12 12:00:24 +00:00
Michael daa832fcf9 Formatting 2021-05-12 11:54:43 +00:00
Michael c3f28252ff Indention 2021-05-12 10:50:01 +00:00
Michael a23d108fa7 Session variable needs to be removed afterwards 2021-05-12 06:51:59 +00:00
Michael 6ca42512e9 OAuth connections now have to be ackknowledged 2021-05-12 06:50:27 +00:00