130 lines
3.4 KiB
PHP
130 lines
3.4 KiB
PHP
<?php
|
|
if (!defined('DC_RC_PATH')) { return; }
|
|
|
|
$core->url->register('rest','rest','^rest(?:/(.*))?$',array('rest','getResponse'));
|
|
class rest extends dcUrlHandlers
|
|
{
|
|
|
|
/**
|
|
* Create the "good" RestQuery instance
|
|
* Input: $httpMethod: String (POST/GET/PATCH etc...)
|
|
* $args Url arguments
|
|
* $user dcAuth object
|
|
* $body Body of the input query. String
|
|
* Output: object RestQuery
|
|
*/
|
|
private function restFactoryQuery($httpMethod,$args,$body){
|
|
//définir la methode API (pas HTML) appelée
|
|
switch($httpMethod){
|
|
case "GET":
|
|
if($args == 'blogs'){
|
|
$queryObj = new RestQueryGetBlogs();
|
|
break;
|
|
}elseif($args == 'specs'){
|
|
$queryObj = new RestQueryGetSpecs();
|
|
break;
|
|
}elseif(preg_match('/^blogs\/(.*)$/', $args )){
|
|
///blogs/{blog-id}
|
|
$queryObj = new RestQueryGetBlog($args);
|
|
break;
|
|
}elseif(preg_match('/^(.*)\/settings$/', $args )){
|
|
$queryObj = new RestQueryGetBlogSettings($args);
|
|
break;
|
|
}
|
|
|
|
break;
|
|
case "POST":
|
|
if($args == 'blogs'){
|
|
$queryObj = new RestQueryPostBlogs($body);
|
|
}
|
|
|
|
break;
|
|
case "PUT":
|
|
if(preg_match('/^blogs\/(.*)$/', $args )){
|
|
$queryObj = new ResQueryPutBlogs($args,$body);
|
|
break;
|
|
}
|
|
break;
|
|
|
|
case "PATCH":
|
|
if(preg_match('/^blogs\/(.*)$/', $args )){
|
|
$queryObj = new ResQueryPatchBlogs($args,$body);
|
|
break;
|
|
}
|
|
|
|
break;
|
|
|
|
case "DELETE":
|
|
if(preg_match('/^blogs\/(.*)$/', $args )){
|
|
$queryObj = new ResQueryDeleteBlogs($args,$body);
|
|
break;
|
|
}
|
|
break;
|
|
default:
|
|
$queryObj = new RestQuery();
|
|
break;
|
|
}
|
|
|
|
return $queryObj;
|
|
|
|
}
|
|
|
|
public static function getResponse($args)
|
|
{
|
|
global $core;
|
|
$active = (boolean)$core->blog->settings->rest->rest_active;
|
|
if (!$active){
|
|
self::p404();
|
|
return;
|
|
}
|
|
|
|
//coors headers
|
|
if($core->blog->settings->rest->rest_send_cors_headers){
|
|
header('Access-Control-Allow-Origin: *');
|
|
header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
|
|
header('Access-Control-Allow-Headers: Content-Type, authorization, x_dc_key');
|
|
}
|
|
|
|
|
|
//exception pour la documentation
|
|
if($args == "documentation"){
|
|
include (dirname(__FILE__).'/documentation/swagger-ui-dist/index.php');
|
|
return;
|
|
}
|
|
|
|
header('Content-Type: application/json');
|
|
|
|
//user authentification (facultative at this step)
|
|
$apiKey = rest::get_api_key_sended();
|
|
//$user = false;
|
|
if($apiKey){
|
|
$core->auth = new restAuth($core);
|
|
if($core->auth->checkUser('','',$apiKey) === false){
|
|
header(RestQuery::get_full_code_header(403));
|
|
echo json_encode(array(
|
|
"error" => "Wrong API Key",
|
|
"code" => 403
|
|
));
|
|
return;
|
|
}
|
|
}else{
|
|
$core->auth = false;
|
|
}
|
|
$r = rest::restFactoryQuery($_SERVER['REQUEST_METHOD'],$args,file_get_contents('php://input'));
|
|
header($r->get_full_code_header());
|
|
echo json_encode($r->response_message);
|
|
|
|
}
|
|
|
|
private function get_api_key_sended()
|
|
{
|
|
//to do: test it on nginx
|
|
$headers = apache_request_headers();
|
|
if(isset($headers['x_dc_key'])){
|
|
return $headers['x_dc_key'];
|
|
}else{
|
|
return false;
|
|
}
|
|
}
|
|
|
|
}
|