8 commits

Author	SHA1	Message	Date
Jeldrik Hanschke	8a4954f4e8	drop support for polls created with Croodle <= 0.3.x (#709)	2023-10-27 20:40:18 +02:00
jelhan	e7555f873f	do not hardcode another DATA_DIR if php built-in webserver is used	2017-08-13 20:22:01 +02:00
jelhan	be57db575d	update api to Slim 3.5 ... also updates codeception have to lock phpbuiltinserver cause of https://github.com/tiger-seo/PhpBuiltinServer/pull/32	2016-08-18 23:39:16 +02:00
jelhan	bfe1f488d4	remove proof key knowledge cause it's not secure implemented yet	2015-10-29 12:48:46 +01:00
jelhan	dec12d81a7	move legacy support to api	2015-10-17 15:44:27 +02:00
jelhan	b9bef69977	user has to proof that he knows encryption key when he participates ... Therefore sha256 hash of encryption key is validated against one which is stored on server on poll creation. This one is transfered as X-Croodle-Proof-Key-Knowledge HTTP HEADER. Prevents an attacker of transmitting data with wrong encryption key, which would cause decryption errors for legit users.	2015-08-23 18:56:41 +02:00
jelhan	6ed0cc367a	reimplement expiration date in new api models	2015-08-23 06:18:05 +02:00
jelhan	09c8310bb6	rewritten API models	2015-08-22 23:47:31 +02:00