342 lines
10 KiB
PHP
342 lines
10 KiB
PHP
<?php defined('BASEPATH') OR exit('No direct script access allowed');
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| HTTP protocol
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Should the service accept only HTTPS requests or not?
|
|
|
|
|
| Default: FALSE
|
|
|
|
|
*/
|
|
$config['force_https'] = FALSE;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Format
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| What format should the data be returned in by default?
|
|
|
|
|
| Default: xml
|
|
|
|
|
*/
|
|
$config['rest_default_format'] = 'xml';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Enable emulate request
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Should we enable emulation of the request (e.g. used in Mootools request)?
|
|
|
|
|
| Default: false
|
|
|
|
|
*/
|
|
$config['enable_emulate_request'] = TRUE;
|
|
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Realm
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Name for the password protected REST API displayed on login dialogs
|
|
|
|
|
| E.g: My Secret REST API
|
|
|
|
|
*/
|
|
$config['rest_realm'] = 'REST API';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Login
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Is login required and if so, which type of login?
|
|
|
|
|
| '' = no login required, 'basic' = unsecure login, 'digest' = more secure login
|
|
|
|
|
*/
|
|
$config['rest_auth'] = false;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Login
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Is login required and if so, which user store do we use?
|
|
|
|
|
| '' = use config based users, 'ldap' = use LDAP authencation
|
|
|
|
|
*/
|
|
$config['auth_source'] = 'ldap';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Override auth types for specific class/method
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Set specific authentication types for methods within a class (controller)
|
|
|
|
|
| Set as many config entries as needed. Any methods not set will use the default 'rest_auth' config value.
|
|
|
|
|
| example:
|
|
|
|
|
| $config['auth_override_class_method']['deals']['view'] = 'none';
|
|
| $config['auth_override_class_method']['deals']['insert'] = 'digest';
|
|
| $config['auth_override_class_method']['accounts']['user'] = 'basic';
|
|
|
|
|
| Here 'deals' and 'accounts' are controller names, 'view', 'insert' and 'user' are methods within. (NOTE: leave off the '_get' or '_post' from the end of the method name)
|
|
| Acceptable values are; 'none', 'digest' and 'basic'.
|
|
|
|
|
*/
|
|
// $config['auth_override_class_method']['deals']['view'] = 'none';
|
|
// $config['auth_override_class_method']['deals']['insert'] = 'digest';
|
|
// $config['auth_override_class_method']['accounts']['user'] = 'basic';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Login usernames
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Array of usernames and passwords for login, if ldap is configured this is ignored
|
|
|
|
|
| array('admin' => '1234')
|
|
|
|
|
*/
|
|
$config['rest_valid_logins'] = array('admin' => '1234');
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Global IP Whitelisting
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Limit connections to your REST server to whitelisted IP addresses.
|
|
|
|
|
| Usage:
|
|
| 1. Set to true *and* select an auth option for extreme security (client's IP
|
|
| address must be in whitelist and they must also log in)
|
|
| 2. Set to true with auth set to false to allow whitelisted IPs access with no login.
|
|
| 3. Set to false here but set 'auth_override_class_method' to 'whitelist' to
|
|
| restrict certain methods to IPs in your whitelist
|
|
|
|
|
*/
|
|
$config['rest_ip_whitelist_enabled'] = false;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST IP Whitelist
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Limit connections to your REST server to a comma separated
|
|
| list of IP addresses
|
|
|
|
|
| Example: $config['rest_ip_whitelist'] = '123.456.789.0, 987.654.32.1';
|
|
|
|
|
| 127.0.0.1 and 0.0.0.0 are allowed by default.
|
|
|
|
|
*/
|
|
$config['rest_ip_whitelist'] = '';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Database Group
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Connect to a database group for keys, logging, etc. It will only connect
|
|
| if you have any of these features enabled.
|
|
|
|
|
| 'default'
|
|
|
|
|
*/
|
|
$config['rest_database_group'] = 'default';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST API Keys Table Name
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The table name in your database that stores API Keys.
|
|
|
|
|
| 'keys'
|
|
|
|
|
*/
|
|
$config['rest_keys_table'] = 'keys';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Enable Keys
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| When set to true REST_Controller will look for a key and match it to the DB.
|
|
| If no key is provided, the request will return an error.
|
|
|
|
|
| FALSE
|
|
|
|
CREATE TABLE `keys` (
|
|
`id` int(11) NOT NULL AUTO_INCREMENT,
|
|
`key` varchar(40) NOT NULL,
|
|
`level` int(2) NOT NULL,
|
|
`ignore_limits` tinyint(1) NOT NULL DEFAULT '0',
|
|
`is_private_key` tinyint(1) NOT NULL DEFAULT '0',
|
|
`ip_addresses` TEXT NULL DEFAULT NULL,
|
|
`date_created` int(11) NOT NULL,
|
|
PRIMARY KEY (`id`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
|
|
|
|
|
*/
|
|
$config['rest_enable_keys'] = FALSE;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Table Key Column Name
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| If you are not using the default table schema as shown above, what is the
|
|
| name of the db column that holds the api key value?
|
|
|
|
|
*/
|
|
$config['rest_key_column'] = 'key';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Key Length
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| How long should created keys be? Double check this in your db schema.
|
|
|
|
|
| Default: 32
|
|
| Max: 40
|
|
|
|
|
*/
|
|
$config['rest_key_length'] = 40;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST API Key Variable
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Which variable will provide us the API Key
|
|
|
|
|
| Default: X-API-KEY
|
|
|
|
|
*/
|
|
$config['rest_key_name'] = 'X-API-KEY';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST API Logs Table Name
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The table name in your database that stores logs.
|
|
|
|
|
| 'logs'
|
|
|
|
|
*/
|
|
$config['rest_logs_table'] = 'logs';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Enable Logging
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| When set to true REST_Controller will log actions based on key, date,
|
|
| time and IP address. This is a general rule that can be overridden in the
|
|
| $this->method array in each controller.
|
|
|
|
|
| FALSE
|
|
|
|
|
CREATE TABLE `logs` (
|
|
`id` int(11) NOT NULL AUTO_INCREMENT,
|
|
`uri` varchar(255) NOT NULL,
|
|
`method` varchar(6) NOT NULL,
|
|
`params` text DEFAULT NULL,
|
|
`api_key` varchar(40) NOT NULL,
|
|
`ip_address` varchar(45) NOT NULL,
|
|
`time` int(11) NOT NULL,
|
|
`authorized` tinyint(1) NOT NULL,
|
|
PRIMARY KEY (`id`)
|
|
) ENGINE=MyISAM DEFAULT CHARSET=utf8;
|
|
|
|
|
*/
|
|
$config['rest_enable_logging'] = FALSE;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST API Param Log Format
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| When set to true API log params will be stored in the database as JSON,
|
|
| when false they will be php serialized.
|
|
|
|
|
*/
|
|
$config['rest_logs_json_params'] = FALSE;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST API Limits Table Name
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The table name in your database that stores limits.
|
|
|
|
|
| 'logs'
|
|
|
|
|
*/
|
|
$config['rest_limits_table'] = 'limits';
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Enable Limits
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| When set to true REST_Controller will count the number of uses of each method
|
|
| by an API key each hour. This is a general rule that can be overridden in the
|
|
| $this->method array in each controller.
|
|
|
|
|
| FALSE
|
|
|
|
|
CREATE TABLE `limits` (
|
|
`id` int(11) NOT NULL AUTO_INCREMENT,
|
|
`uri` varchar(255) NOT NULL,
|
|
`count` int(10) NOT NULL,
|
|
`hour_started` int(11) NOT NULL,
|
|
`api_key` varchar(40) NOT NULL,
|
|
PRIMARY KEY (`id`)
|
|
) ENGINE=MyISAM DEFAULT CHARSET=utf8;
|
|
|
|
|
*/
|
|
$config['rest_enable_limits'] = FALSE;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST Ignore HTTP Accept
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Set to TRUE to ignore the HTTP Accept and speed up each request a little.
|
|
| Only do this if you are using the $this->rest_format or /format/xml in URLs
|
|
|
|
|
| FALSE
|
|
|
|
|
*/
|
|
$config['rest_ignore_http_accept'] = FALSE;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| REST AJAX Only
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Set to TRUE to only allow AJAX requests. If TRUE and the request is not
|
|
| coming from AJAX, a 505 response with the error message "Only AJAX
|
|
| requests are accepted." will be returned. This is good for production
|
|
| environments. Set to FALSE to also accept HTTP requests.
|
|
|
|
|
| FALSE
|
|
|
|
|
*/
|
|
$config['rest_ajax_only'] = FALSE;
|
|
|
|
/* End of file config.php */
|
|
/* Location: ./system/application/config/rest.php */
|