Commit Graph

17 Commits

Author SHA1 Message Date
Alexis Mousset
1efeee42d9 Use files for favicons 2015-12-07 17:42:26 +01:00
Mathias Kresin
c511b2264c Use case insensitive compare when validating the fever api key
User aschilling made some extensive client tests with miniflux and noticed that Mr Reader (iOS) and ReadKit (OSX) are sending the API key in upper case.
2015-12-04 18:12:42 +01:00
Frederic Guillot
4f7ea89925 Update dependencies 2015-08-14 21:33:39 -04:00
Kordian Bruck
dd47b3f82e Add feed group feature
- each feed can have multiple groups assigned
- group assignments are done on the add or edit feed page
- groups are only visible on the unread page
- groups are exported via the fever api
- it's not possible do delete a group manually from the database (the group will be removed automatically, as soon as the last association of a group to a feed is removed)
- if you try to create an already existing group, the existing group is used to prevent duplicates
2015-08-05 01:01:21 +02:00
Mathias Kresin
71c354e315 Cleanup fever API
- remove the pseudo group 'All', the API description doesn't say that a group is required and Reeder on iOS works fine without groups
- mark feeds/groups only as read since the API doesn't allow to mark them as unread
2015-08-05 01:01:21 +02:00
Frederic Guillot
729c2bfb42 Fix Fever API bug: enable send bookmark to third-party services 2015-05-03 08:56:41 -04:00
Frederic Guillot
c73e3ff9ba Merge pull-request #351 2015-03-25 19:41:23 -04:00
Bruce Doan
cc859bab2d Implement Favicons request 2015-03-23 23:44:52 +07:00
Bruce Doan
5edb1bd64a Do not send removed/pruned item(s) to client 2015-03-23 23:42:31 +07:00
Mathias Kresin
8241177556 switch config table to key/value store 2015-01-28 05:26:36 +01:00
Frederic Guillot
cd1a0115c2 Minor cleanups 2015-01-17 18:53:40 -05:00
Mathias Kresin
cfd03efc01 Fix database hijacking
Check if a requested database can be selected. Error out if not.
This prevents automatic fallbacks to the default database.

Remove the authorized information from the session if a new database
gets selected.

Factor out logout function to reuse existing code.
2015-01-17 21:14:44 +01:00
Frédéric Guillot
c43d9dd773 Fix a bug for image proxy and update dependencies 2014-12-29 16:52:36 -05:00
Mathias Kresin
df4f3b2a52 Fever API: Allow to select the database
Utilize apaches mod_rewrite to append a database parameter to the fever
api script based on the requested URL. Basically everything after
/fever/ is treated as the desired database. E.g. using
https://www.miniflux.net/fever/custom.sqlite/ as server url selects this
database as sync source/target.

The user supplied database parameter is compared with the output of
Model\Database\get_all(), which ensures that only files within the
DATA_DIRECTORY can be referenced (prevents File Inclusion/Directory
Traversal vulnerabilities).

I've tested it against Reeder on iOS. Note that Reeder does not allow
the same user name to be used multiple times within the same domain
name, even if the used URLs are different.
2014-12-26 23:01:05 +01:00
Frédéric Guillot
4fa894925e Fix bug items sync for the Fever api 2014-11-08 22:33:50 -05:00
Mathias Kresin
b5b5e91bb0 Fever API - Fix Mark all as read for feed unread
Zero is a valid super group id according to the "mark the Kindling super group
as read" example in the Fever API docs. But the php function empty considers 0
as an empty value and the condition is never true.

The condition has been changed to accept -1 for the "Sparks" super group,
0 for the "Kindling" super group and any other positive integer (feed and
item id must be positive integers).

The group id Zero is used by Reeder for iOS for the virtual feed "unread".
2014-11-06 19:54:12 +01:00
Frédéric Guillot
5801258ace Add Fever API support 2014-10-29 21:28:23 -04:00