Files
FreshRSS/docs/en/users/06_Fever_API.md
Kevin Papst 8f1bad60d0 Add Fever API and user documentation (#1836)
* added fever api and documentation

* spaces to tabs

* fixed code format

* added links

* added utf8 to header

* removed XML support

* removed before check, as we have to convert it afterwards

* added sandboxed setting (currently disabled)
added support for extensions using entry_before_display

* listFeedsOrderUpdate LIMIT

https://github.com/FreshRSS/FreshRSS/pull/1836/files#r175287881

* removed custom sql by using FreshRSS_FeedDAO::listFeedsOrderUpdate()

* fixed mark all as read

* replaced custom sql for getUnread() and getStarred() with dao functions

* removed sanitization functions

* Rework fever login

* Fix config bug

Plus documentation

* Fix array syntax

For compatibility with PHP 5.3

* Disable cookies and session for API

* Fix currentUser

* added response header and error log

* adjusted phpdoc to match new authentication

* Mechanism to delete old keys

* replace PHP_INT_MAX with zero to disable limit

* replace method_exists with check for explicit methods

* removed Press support and smaller refactoring + updated docu

* Rewrite bindParamArray

Avoid one of the SQL injection risks

* Docs and readme

* Fix API link

* Simplify reverse key check

Using userConfig
2018-05-24 21:53:47 +02:00

4.2 KiB
Raw Blame History

FreshRSS - Fever API implementation

RSS clients

There are many RSS clients existing supporting Fever APIs but they seem to understand the Fever API a bit differently. If your favourite client does not work properly with this API, create an issue and we will have a look. But we can only do that for free clients.

Usage & Authentication

Before you can start to use this API, you have to enable and setup API access, which is documented here, and then re-set the users API password.

Then point your mobile application to the URL of fever.php (e.g. https://freshrss.example.net/api/fever.php).

Compatibility

Tested with:

  • iOS

  • MacOS

  • Android -Until now, we don't know about compatible Android clients. Please leave your feedback, if you tested the Fever API with Android apps.

    • Please note, that Press is NOT compatible: it was a popular RSS client with Fever support, but its development stopped a while ago. It uses the Fever API in a wrong way, which we don't support.

Features

Following features are implemented:

  • fetching categories
  • fetching feeds
  • fetching RSS items (new, favorites, unread, by_id, by_feed, by_category, since)
  • fetching favicons
  • setting read marker for item(s)
  • setting starred marker for item(s)
  • setting read marker for feed
  • setting read marker for category
  • supports FreshRSS extensions, which use th entry_before_display hook

Following features are not supported:

  • Hot Links aka hot as there is nothing in FreshRSS yet that is similar or could be used to simulate it

If this API does not work as expected in your RSS reader, you can test it manually with a tool like Postman.

Configure a POST request to the URL https://freshrss.example.net/api/fever.php?api which should give you the result:

{
	"api_version": 3,
	"auth": 0
}

Great, the base setup seems to work!

Now lets try an authenticated call. Fever uses an api_key, which is the MD5 hash of "$username:$apiPassword". Assuming the user is kevin and the password freshrss, here is a command-line example to compute the resulting api_key

api_key=`echo -n "kevin:freshrss" | md5sum | cut -d' ' -f1`

Add a body to your POST request encoded as form-data and one key named api_key with the value your-password-hash:

curl -s -F "api_key=$api_key" 'https://freshrss.example.net/api/fever.php?api'

This shoud give:

{
	"api_version": 3,
	"auth": 1,
	"last_refreshed_on_time": "1520013061"
}

Perfect, you are authenticated and can now start testing the more advanced features. Therefor change the URL and append the possible API actions to your request parameters. Check the original Fever documentation for more infos.

Some basic calls are:

Replace some_id with a real ID from your freshrss_username_entry database.

Debugging

If nothing helps and your clients still misbehaves, add these lines to the start of fever.api:

file_put_contents(__DIR__ . '/fever.log', $_SERVER['HTTP_USER_AGENT'] . ': ' . json_encode($_REQUEST) . PHP_EOL, FILE_APPEND);

Then use your RSS client to query the API and afterwards check the file fever.log.

Credits

This plugin was inspired by the tinytinyrss-fever-plugin.