Commit Graph

66 Commits

Author SHA1 Message Date
Matt N
33092e4022 Allow API authentication using the auth query parameter containing an auth. hash. (#1845)
* Allow API authentication using the `auth` query parameter containing an auth. hash.

Fixes #1827

The same auth. hash for zms is used here. This allows consumers to use the API without sending the password in the query string and not require forging logins via the login form.

* Move logger.php's global Debug function to Logger::Debug to avoid polluting globals

This avoids a conflict with CakePHP when logger.php gets included indrectly from API code.

* Protect action=login when ZM_ENABLE_CSRF_MAGIC is enabled
2017-05-15 21:51:48 -04:00
Matthew Noorenberghe
ea558c79a0 Fix check that API user is enabled 2017-03-20 17:16:24 -07:00
Andy Bauer
2dda2d9e1e remove unneeded, empty files 2016-12-26 09:49:14 -06:00
Pliable Pixels
192d0dbb45 added TimeZone get API 2016-10-18 14:07:31 -04:00
Pliable Pixels
1440dd9265 retab 2016-09-03 15:02:32 -04:00
Pliable Pixels
7bf0b3c423 readded forMonitor - removed by mistake 2016-09-03 14:51:24 -04:00
Pliable Pixels
9a4330eb59 #1537 Zones Controller not returning all zones 2016-09-03 14:46:47 -04:00
Isaac Connor
55f5db55dd implement suggested code to stop the monitor when Function is set to None 2016-09-01 11:43:20 -04:00
Isaac Connor
b4aec41d3d fix warnings and move User import up higher to where it needs to be 2016-06-21 09:09:58 -04:00
Isaac Connor
dbdd1ae51e remove debug logging 2016-06-07 16:26:58 -04:00
Isaac Connor
f26c9168c4 if user=&pass= are in request, use them for auth 2016-06-07 16:25:35 -04:00
arjunrc
4018cab743 don't pass partial data to daemoncontrol 2016-05-19 14:53:16 -04:00
arjunrc
b513bcef82 icon's gonna kill me 2016-05-10 20:09:41 -04:00
arjunrc
af3cae578e fixed verbose handling bug for status command on zmu 2016-05-10 20:07:28 -04:00
arjunrc
8d5f2a8e5d added iconnor's change back 2016-05-10 19:17:09 -04:00
arjunrc
df830a5190 resolved merge conflicts 2016-05-10 19:15:00 -04:00
arjunrc
2888142e68 added status command to retrieve alarmed status of monitor in addition to on/of 2016-05-10 16:55:43 -04:00
Steve Gilvarry
b03d2660cb Merge pull request #1455 from ZoneMinder/api_servers
rough in Server object support
2016-05-10 08:00:58 +10:00
Isaac Connor
966a9dcd8d Merge pull request #1467 from ZoneMinder/api_fixes
Don't pass request data as a monitor array to daemonControl
2016-05-07 18:25:35 -04:00
Isaac Connor
e35b0a1eb2 Merge pull request #1469 from pliablepixels/1468-api-consoleEvents-alarmedFrames
added alarmed frames filter
2016-05-07 17:06:37 -04:00
arjunrc
be329e1e0d switched to named param format, more flexible, in line with other APIs 2016-05-07 16:28:25 -04:00
arjunrc
8347b69b09 added alarmed frames filter 2016-05-07 14:26:09 -04:00
Isaac Connor
6d991a1c6c Merge pull request #1466 from pliablepixels/1465-api-alarm-on-off
added alarm enable/disable
2016-05-07 11:26:49 -04:00
arjunrc
6f9cc0f19f to be safe, lets add system edit permissions, so rogue users can't turn alarms OFF 2016-05-07 11:01:03 -04:00
Isaac Connor
15977f1a3c Don't pass request data as a monitor array to daemonControl 2016-05-07 10:56:38 -04:00
arjunrc
0280ae4dd5 added alarm enable/disable 2016-05-07 10:37:42 -04:00
Isaac Connor
01aa2c9319 change permissions to stream permissions for view 2016-05-02 19:48:24 -04:00
Isaac Connor
75f9fde920 rough in Server object support 2016-05-02 10:41:25 -04:00
arjunrc
8a47241e18 address issue #1335 2016-03-12 08:07:25 -05:00
arjunrc
6e606aa74b removed issue # 2015-12-19 19:04:27 -05:00
arjunrc
38b4785557 PP - Gone,flitted away, Taken the starts from the night and sun, From the day! Gone, and a cloud in my heart. - Tennyson 2015-12-19 18:36:38 -05:00
arjunrc
b4fdaa9b4d initial user role support 2015-12-19 17:44:46 -05:00
arjunrc
e812398fb9 initial user role support 2015-12-19 17:44:39 -05:00
arjunrc
f56688e7c2 initial user role support 2015-12-19 17:44:16 -05:00
arjunrc
028c9b956c check for opt_use_api, also pull in user roles support 2015-12-19 17:44:02 -05:00
Kyle Johnson
5add10289b Merge pull request #1136 from pliablepixels/1135-events-API-prev-next
added prev/next event ids
2015-11-16 09:23:36 -07:00
Pliable Pixels
7cbad44ae4 also return the prev and next events for the same monitor as the current event 2015-11-04 14:23:28 -05:00
Pliable Pixels
e3d06ca103 added prev/next event ids 2015-11-02 16:54:52 -05:00
Isaac Connor
d39f57c4ff Merge pull request #1073 from pliablepixels/1072-events-API-delete-fix
Delete fixes for Events
2015-09-28 14:46:01 -04:00
Pliable Pixels
a00fed480d Delete fixes for Events 2015-09-28 14:41:36 -04:00
Pliable Pixels
ee78ae5c49 restart monitor when edited via APIs 2015-09-28 09:31:57 -04:00
Andrew Bauer
66ec84fdea Merge pull request #1008 from pliablepixels/993-API-Auth
Included logic to not enforce authentication in API layer if ZM auth is off
2015-08-11 14:51:02 -05:00
Pliable Pixels
a64f7c0036 Included logic to not enforce authentication in API layer if ZM_OPT_USE_AUTH is disabled
If ZM auth is off, API won't work. Changed this to make sure API disables auth if ZM disables auth
2015-08-11 14:47:49 -04:00
Isaac Connor
3e5170678e Merge pull request #1006 from pliablepixels/993-API-Auth
I was using the wrong field to check for portal authentication
2015-08-10 15:58:50 -04:00
Pliable Pixels
f7025aaa26 I was using the wrong field to check for portal authentication
Should be user.Username instead of username
2015-08-10 15:55:44 -04:00
Pliable Pixels
2b0a975fef Bumped up # of events per API to 100 instead of 25 2015-08-07 16:25:48 -04:00
Pliable Pixels
38799050ef APIs will be served only if user is logged into the ZM portal 2015-08-07 16:14:02 -04:00
Pliable Pixels
e332fc36a9 Fixed Configs API to return all values 2015-07-21 13:28:37 -04:00
Isaac Connor
4be341986f Merge pull request #897 from pliablepixels/881-api-branch
Fixed events API to remove thumbnail code
2015-06-22 13:01:15 -04:00
Pliable Pixels
719a903d43 Fixed events API to remove thumbnail code 2015-06-20 20:08:10 -04:00