zoneminder/web/api
Matt N 33092e4022 Allow API authentication using the `auth` query parameter containing an auth. hash. (#1845)
* Allow API authentication using the `auth` query parameter containing an auth. hash.

Fixes #1827

The same auth. hash for zms is used here. This allows consumers to use the API without sending the password in the query string and not require forging logins via the login form.

* Move logger.php's global Debug function to Logger::Debug to avoid polluting globals

This avoids a conflict with CakePHP when logger.php gets included indrectly from API code.

* Protect action=login when ZM_ENABLE_CSRF_MAGIC is enabled
2017-05-15 21:51:48 -04:00
..
app Allow API authentication using the `auth` query parameter containing an auth. hash. (#1845) 2017-05-15 21:51:48 -04:00
lib/Cake Merge pull request #1856 from connortechnology/remove_BOM 2017-04-17 08:32:17 -05:00
.editorconfig Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
.gitattributes Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
.gitignore Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
.htaccess Added "RewriteBase /zm/api" for API routing 2015-07-05 08:59:07 -04:00
CMakeLists.txt Update CMakeLists.txt 2017-05-03 12:35:54 -05:00
CONTRIBUTING.md Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
README.md Update README.md 2015-08-21 11:29:35 +02:00
build.properties Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
build.xml Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
composer.json Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
index.php Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00

README.md

ZoneMinder API

This is the ZoneMinder API. It should be, for now, installed under the webroot e.g. /api.

app/Config/database.php.default must be configured and copied to app/Config/database.php

In adition, Security.salt and Security.cipherSeed in app/Config/core.php should be changed.

The API can run on a dedicated / separate instance, so long as it can access the database as configured in app/Config/database.php