Commit Graph

19 Commits

Author SHA1 Message Date
zotlabs 4f280b5497 allow api login by address or url (url will use zot6 hubloc records, address can use either zot or zot6 hubloc records) 2019-06-25 18:47:16 -07:00
zotlabs 4fdf5d28ca minor oauth2 updates - renamed zot webbie to 'webfinger' and zothash to 'portable_id', fixed/simplified cgi auth mode 2018-08-13 17:24:48 -07:00
Andrew Manning 45e0fc6802 Successful OAuth2 sequence demonstrated with the test vehicle, including an authenticated API call using an access_token. 2018-02-26 18:16:43 -05:00
zotlabs 85b7c90637 strip acct: from OWA auth to API endpoints 2017-12-07 18:56:26 -08:00
zotlabs 499b7de0d2 Reviewed. This is OK.
Revert "may be exploitable in current form - awaiting review"

This reverts commit 7bff60edac.
2017-09-03 00:59:51 -07:00
zotlabs 7bff60edac may be exploitable in current form - awaiting review 2017-09-02 14:04:37 -07:00
zotlabs ae8cdc3b42 some changes after testing server-to-server magic auth 2017-08-31 21:38:03 -07:00
zotlabs b413beeb36 add server-to-server magic auth to dav and cdav controllers 2017-08-31 20:45:13 -07:00
zotlabs 0cf5536e90 server to server magic auth 2017-08-31 20:08:58 -07:00
zotlabs 5e767144c9 simplify api_auth 2017-08-31 19:09:07 -07:00
redmatrix 2fb4952137 issue #460 2016-07-25 13:27:17 -07:00
redmatrix 3affb2e817 sort out some of the authentication mess - with luck this may fix the DAV auth issue which I simply could not duplicate or find a reason for. 2016-07-20 17:55:40 -07:00
redmatrix 9abd95fad3 static App 2016-03-31 16:06:03 -07:00
redmatrix bb0e4044bf remove the unqualified "OAuth" namespace from the project. We need to reference either OAuth1 or OAuth2. 2015-12-13 15:35:45 -08:00
redmatrix 395268da22 a couple of api improvements 2015-12-11 21:10:20 -08:00
redmatrix 8389d8677d some major cleanup of api authentication stuff - still needs much more and this still may not solve #206 2015-12-10 16:39:46 -08:00
redmatrix 0f4ceedbb4 remove duplicated code 2015-12-08 20:47:55 -08:00
redmatrix 656e5fd052 use killme() instead of die() so that any sessions are closed cleanly. 2015-12-08 20:42:46 -08:00
ken restivo ddce0412ac Move api_auth() out to a file that can be included from plugins/modules to allow them to expose their own programmatic API. 2015-11-10 22:50:18 -08:00