mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-04-21 21:19:18 -04:00
0e3327bca7
1) Simplify gallery_rest to return flat models, no children and do no validation for now. 2) Flatten the REST replies and use HTTP codes to indicate success/failure instead of additional status messages. 3) Use the message and error code support in the base Exception class, instead of brewing our own in Rest_Exception. 4) Get rid of rest::success() and rest::fail() -- we only need rest::reply() since all failures are covered by throwing an exception. 5) Get rid of /rest/access_key and just use /rest for authentication. 6) Inline and simplify rest::normalize_request since we only use it once 7) Change rest::set_active_user to succeed or throw an exception 8) Extract Rest_Exception::sendHeaders into rest::send_headers() Here's what's currently broken: 1) Data validation. There currently is none 2) Logging. That's gone too 3) image block and tag code is broken 4) Tests are broken 5) No movie support
80 lines
2.6 KiB
PHP
80 lines
2.6 KiB
PHP
<?php defined("SYSPATH") or die("No direct script access.");
|
|
/**
|
|
* Gallery - a web based photo album viewer and editor
|
|
* Copyright (C) 2000-2009 Bharat Mediratta
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or (at
|
|
* your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
class Rest_Controller extends Controller {
|
|
public function index() {
|
|
try {
|
|
$username = Input::instance()->post("user");
|
|
$password = Input::instance()->post("password");
|
|
|
|
$user = identity::lookup_user_by_name($username);
|
|
if (empty($user) || !identity::is_correct_password($user, $password)) {
|
|
throw new Rest_Exception("Forbidden", 403);
|
|
}
|
|
|
|
$key = ORM::factory("user_access_token")
|
|
->where("user_id", "=", $user->id)
|
|
->find();
|
|
if (!$key->loaded()) {
|
|
$key->user_id = $user->id;
|
|
$key->access_key = md5($user->name . rand());
|
|
$key->save();
|
|
}
|
|
|
|
rest::reply($key->access_key);
|
|
} catch (Exception $e) {
|
|
rest::send_headers($e);
|
|
}
|
|
}
|
|
|
|
public function __call($function, $args) {
|
|
$input = Input::instance();
|
|
switch ($method = strtolower($input->server("REQUEST_METHOD"))) {
|
|
case "get":
|
|
$request->params = (object) Input::instance()->get();
|
|
break;
|
|
|
|
case "post":
|
|
$request->params = (object) Input::instance()->post();
|
|
if (isset($_FILES["file"])) {
|
|
$request->file = upload::save("file");
|
|
}
|
|
break;
|
|
}
|
|
|
|
$request->method = strtolower($input->server("HTTP_X_GALLERY_REQUEST_METHOD", $method));
|
|
$request->access_token = $input->server("HTTP_X_GALLERY_REQUEST_KEY");
|
|
$request->path = implode("/", $args);
|
|
|
|
try {
|
|
rest::set_active_user($request->access_token);
|
|
|
|
$handler_class = "{$function}_rest";
|
|
$handler_method = $request->method;
|
|
|
|
if (!method_exists($handler_class, $handler_method)) {
|
|
throw new Rest_Exception("Forbidden", 403);
|
|
}
|
|
|
|
print call_user_func(array($handler_class, $handler_method), $request);
|
|
} catch (Rest_Exception $e) {
|
|
rest::send_headers($e);
|
|
}
|
|
}
|
|
} |