Commit graph

10 commits

Author SHA1 Message Date
jelhan
e7555f873f do not hardcode another DATA_DIR if php built-in webserver is used 2017-08-13 20:22:01 +02:00
jelhan
7ce671a9c3 api debug mode should be configurable by config.php 2016-12-03 21:41:42 +01:00
jelhan
e7137e2db3 make path of data dir configurable
Closes #109
2016-08-19 00:23:49 +02:00
jelhan
be57db575d update api to Slim 3.5
also updates codeception
have to lock phpbuiltinserver cause of https://github.com/tiger-seo/PhpBuiltinServer/pull/32
2016-08-18 23:39:16 +02:00
jelhan
bfe1f488d4 remove proof key knowledge cause it's not secure implemented yet 2015-10-29 12:48:46 +01:00
jelhan
b9bef69977 user has to proof that he knows encryption key when he participates
Therefore sha256 hash of encryption key is validated against one which is stored
on server on poll creation.
This one is transfered as X-Croodle-Proof-Key-Knowledge HTTP HEADER.

Prevents an attacker of transmitting data with wrong encryption key, which
would cause decryption errors for legit users.
2015-08-23 18:56:41 +02:00
jelhan
09c8310bb6 rewritten API models 2015-08-22 23:47:31 +02:00
jelhan
1bcee719d1 user id has to be unique 2015-08-19 15:30:33 +02:00
jelhan
e94ee685ea tests for api using codeception 2015-08-01 21:05:22 +02:00
jelhan
d1c8646bda rewritten api using Slim Framework 2015-08-01 18:42:48 +02:00