summaryrefslogtreecommitdiff
path: root/modules/rest
diff options
context:
space:
mode:
Diffstat (limited to 'modules/rest')
-rw-r--r--modules/rest/controllers/rest.php10
-rw-r--r--modules/rest/helpers/rest.php12
-rw-r--r--modules/rest/helpers/rest_event.php14
-rw-r--r--modules/rest/helpers/rest_installer.php14
-rw-r--r--modules/rest/models/user_access_key.php (renamed from modules/rest/models/user_access_token.php)2
-rw-r--r--modules/rest/module.info2
-rw-r--r--modules/rest/tests/Rest_Controller_Test.php22
7 files changed, 42 insertions, 34 deletions
diff --git a/modules/rest/controllers/rest.php b/modules/rest/controllers/rest.php
index 13594763..410eeece 100644
--- a/modules/rest/controllers/rest.php
+++ b/modules/rest/controllers/rest.php
@@ -34,7 +34,7 @@ class Rest_Controller extends Controller {
auth::login($user);
- $key = rest::get_access_token($user->id);
+ $key = rest::get_access_key($user->id);
rest::reply($key->access_key);
}
@@ -56,15 +56,15 @@ class Rest_Controller extends Controller {
}
$request->method = strtolower($input->server("HTTP_X_GALLERY_REQUEST_METHOD", $method));
- $request->access_token = $input->server("HTTP_X_GALLERY_REQUEST_KEY");
+ $request->access_key = $input->server("HTTP_X_GALLERY_REQUEST_KEY");
- if (empty($request->access_token) && !empty($request->params->access_token)) {
- $request->access_token = $request->params->access_token;
+ if (empty($request->access_key) && !empty($request->params->access_key)) {
+ $request->access_key = $request->params->access_key;
}
$request->url = url::abs_current(true);
- rest::set_active_user($request->access_token);
+ rest::set_active_user($request->access_key);
$handler_class = "{$function}_rest";
$handler_method = $request->method;
diff --git a/modules/rest/helpers/rest.php b/modules/rest/helpers/rest.php
index 7440350f..49999520 100644
--- a/modules/rest/helpers/rest.php
+++ b/modules/rest/helpers/rest.php
@@ -37,13 +37,13 @@ class rest_Core {
}
}
- static function set_active_user($access_token) {
- if (empty($access_token)) {
+ static function set_active_user($access_key) {
+ if (empty($access_key)) {
throw new Rest_Exception("Forbidden", 403);
}
- $key = ORM::factory("user_access_token")
- ->where("access_key", "=", $access_token)
+ $key = ORM::factory("user_access_key")
+ ->where("access_key", "=", $access_key)
->find();
if (!$key->loaded()) {
@@ -58,8 +58,8 @@ class rest_Core {
identity::set_active_user($user);
}
- static function get_access_token($user_id) {
- $key = ORM::factory("user_access_token")
+ static function get_access_key($user_id) {
+ $key = ORM::factory("user_access_key")
->where("user_id", "=", $user_id)
->find();
diff --git a/modules/rest/helpers/rest_event.php b/modules/rest/helpers/rest_event.php
index 91affe7a..c89436c0 100644
--- a/modules/rest/helpers/rest_event.php
+++ b/modules/rest/helpers/rest_event.php
@@ -24,7 +24,7 @@ class rest_event {
*/
static function user_before_delete($user) {
db::build()
- ->delete("user_access_tokens")
+ ->delete("user_access_keys")
->where("id", "=", $user->id)
->execute();
}
@@ -34,7 +34,7 @@ class rest_event {
* on every add.
*/
static function user_add_form_admin_completed($user, $form) {
- $key = ORM::factory("user_access_token");
+ $key = ORM::factory("user_access_key");
$key->user_id = $user->id;
$key->access_key = md5($user->name . rand());
$key->save();
@@ -58,7 +58,7 @@ class rest_event {
* Get the form fields for user edit
*/
static function _get_access_key_form($user, $form) {
- $key = ORM::factory("user_access_token")
+ $key = ORM::factory("user_access_key")
->where("user_id", "=", $user->id)
->find();
@@ -68,7 +68,7 @@ class rest_event {
$key->save();
}
- $form->edit_user->input("user_access_token")
+ $form->edit_user->input("user_access_key")
->value($key->access_key)
->readonly("readonly")
->class("g-form-static")
@@ -87,9 +87,9 @@ class rest_event {
}
$view = new View("user_profile_rest.html");
- $key = ORM::factory("user_access_token")
- ->where("user_id", "=", $data->user->id)
- ->find();
+ $key = ORM::factory("user_access_key")
+ ->where("user_id", "=", $data->user->id)
+ ->find();
if (!$key->loaded()) {
$key->user_id = $data->user->id;
diff --git a/modules/rest/helpers/rest_installer.php b/modules/rest/helpers/rest_installer.php
index f69f62d1..aeb9573e 100644
--- a/modules/rest/helpers/rest_installer.php
+++ b/modules/rest/helpers/rest_installer.php
@@ -20,7 +20,7 @@
class rest_installer {
static function install() {
Database::instance()
- ->query("CREATE TABLE {user_access_tokens} (
+ ->query("CREATE TABLE {user_access_keys} (
`id` int(9) NOT NULL auto_increment,
`user_id` int(9) NOT NULL,
`access_key` char(32) NOT NULL,
@@ -28,10 +28,18 @@ class rest_installer {
UNIQUE KEY(`access_key`),
UNIQUE KEY(`user_id`))
DEFAULT CHARSET=utf8;");
- module::set_version("rest", 1);
+ module::set_version("rest", 2);
+ }
+
+ static function upgrade($version) {
+ $db = Database::instance();
+ if ($version == 1) {
+ $db->query("RENAME TABLE {user_access_tokens} TO {user_access_keys}");
+ module::set_version("rest", $version = 2);
+ }
}
static function uninstall() {
- Database::instance()->query("DROP TABLE IF EXISTS {user_access_tokens}");
+ Database::instance()->query("DROP TABLE IF EXISTS {user_access_keys}");
}
}
diff --git a/modules/rest/models/user_access_token.php b/modules/rest/models/user_access_key.php
index 44330768..1da0f5eb 100644
--- a/modules/rest/models/user_access_token.php
+++ b/modules/rest/models/user_access_key.php
@@ -17,5 +17,5 @@
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1301, USA.
*/
-class User_Access_Token_Model extends ORM {
+class User_Access_Key_Model extends ORM {
}
diff --git a/modules/rest/module.info b/modules/rest/module.info
index 45bd79e4..3ab7e165 100644
--- a/modules/rest/module.info
+++ b/modules/rest/module.info
@@ -1,4 +1,4 @@
name = "REST Access Module"
description = "The RESTful implementation/interface to Gallery3"
-version = 1
+version = 2
diff --git a/modules/rest/tests/Rest_Controller_Test.php b/modules/rest/tests/Rest_Controller_Test.php
index 21be8300..6d09b214 100644
--- a/modules/rest/tests/Rest_Controller_Test.php
+++ b/modules/rest/tests/Rest_Controller_Test.php
@@ -21,7 +21,7 @@ class Rest_Controller_Test extends Gallery_Unit_Test_Case {
public function setup() {
$this->_save = array($_GET, $_POST, $_SERVER);
- $key = rest::get_access_token(1); // admin user
+ $key = rest::get_access_key(1); // admin user
$_SERVER["HTTP_X_GALLERY_REQUEST_KEY"] = $key->access_key;
}
@@ -34,14 +34,14 @@ class Rest_Controller_Test extends Gallery_Unit_Test_Case {
// There's no access key at first
$this->assert_false(
- ORM::factory("user_access_token")->where("user_id", "=", $user->id)->find()->loaded());
+ ORM::factory("user_access_key")->where("user_id", "=", $user->id)->find()->loaded());
$_POST["user"] = $user->name;
$_POST["password"] = "password";
$response = test::call_and_capture(array(new Rest_Controller(), "index"));
$expected =
- ORM::factory("user_access_token")->where("user_id", "=", $user->id)->find()->access_key;
+ ORM::factory("user_access_key")->where("user_id", "=", $user->id)->find()->access_key;
// Now there is an access key, and it was returned
$this->assert_equal(json_encode($expected), $response);
@@ -82,11 +82,11 @@ class Rest_Controller_Test extends Gallery_Unit_Test_Case {
$_SERVER["REQUEST_METHOD"] = "GET";
$_GET["key"] = "value";
- $key = rest::get_access_token(1); // admin user
+ $key = rest::get_access_key(1); // admin user
$this->assert_array_equal_to_json(
array("params" => array("key" => "value"),
"method" => "get",
- "access_token" => $key->access_key,
+ "access_key" => $key->access_key,
"url" => "http://./index.php/gallery_unit_test"),
test::call_and_capture(array(new Rest_Controller(), "mock")));
}
@@ -95,11 +95,11 @@ class Rest_Controller_Test extends Gallery_Unit_Test_Case {
$_SERVER["REQUEST_METHOD"] = "POST";
$_POST["key"] = "value";
- $key = rest::get_access_token(1); // admin user
+ $key = rest::get_access_key(1); // admin user
$this->assert_array_equal_to_json(
array("params" => array("key" => "value"),
"method" => "post",
- "access_token" => $key->access_key,
+ "access_key" => $key->access_key,
"url" => "http://./index.php/gallery_unit_test"),
test::call_and_capture(array(new Rest_Controller(), "mock")));
}
@@ -109,11 +109,11 @@ class Rest_Controller_Test extends Gallery_Unit_Test_Case {
$_SERVER["HTTP_X_GALLERY_REQUEST_METHOD"] = "put";
$_POST["key"] = "value";
- $key = rest::get_access_token(1); // admin user
+ $key = rest::get_access_key(1); // admin user
$this->assert_array_equal_to_json(
array("params" => array("key" => "value"),
"method" => "put",
- "access_token" => $key->access_key,
+ "access_key" => $key->access_key,
"url" => "http://./index.php/gallery_unit_test"),
test::call_and_capture(array(new Rest_Controller(), "mock")));
}
@@ -123,11 +123,11 @@ class Rest_Controller_Test extends Gallery_Unit_Test_Case {
$_SERVER["HTTP_X_GALLERY_REQUEST_METHOD"] = "delete";
$_POST["key"] = "value";
- $key = rest::get_access_token(1); // admin user
+ $key = rest::get_access_key(1); // admin user
$this->assert_array_equal_to_json(
array("params" => array("key" => "value"),
"method" => "delete",
- "access_token" => $key->access_key,
+ "access_key" => $key->access_key,
"url" => "http://./index.php/gallery_unit_test"),
test::call_and_capture(array(new Rest_Controller(), "mock")));
}
generated by cgit v1.2.3 (git 2.46.0) at 2025-10-13 09:50:17 +0000