Skip to content

Latest commit

 

History

History
162 lines (91 loc) · 4.44 KB

API.md

File metadata and controls

162 lines (91 loc) · 4.44 KB
Raw

API

API Usage

Request bodies for POST and PUT can be either JSON or URL encoded.

To send authenticated requests, send a POST request to /api/login to get a token. Send the token in an X-Access-Token header or a token query parameter, or a token field in the request body with any request to authenticate the request.

API Reference

/api/login

  • POST

    Returns an authentication token.

    Required fields: email, password

/api/users

  • POST

    Creates a user.

    Required fields: first_name, last_name, email, password

    Optional fields: username

  • GET

    Returns an array of all users.

    Requires authentication, Requires admin

/api/documents

  • GET

    Returns an array of all documents sorted by the publish date.

    If no authentication is provided, the list only includes public documents; if authentication is provided the list includes all documents that are not private documents belonging to other users.

    Query string options
    • skip - Number of documents to skip. (If the value is not a number, it will be ignored)
    • limit - Number of documents to return. (If the value is not a number, it will be ignored)
    • published_before - Only return documents created before this date and time. (If the value is not a valid JavaScript date string, it will be ignored)
    • published_after - Only return documents created before this date and time. (If the value is not a valid JavaScript date string, it will be ignored)
    • read_access - Only return documents with this level of read access. (Invalid read_access e.g any will return an empty list of documents as the value will be compared directly and won't match any document)
    • contains - Only return documents that contain this text

    You can combined multiple options to obtain more specific filter criteria e.g to get first 10 documents published on a certain date, combine limit=10, published_after=$START_OF_DAY and published_before=$END_OF_DAY.

  • POST

    Creates a document

    Required fields: title, content

    Optional fields: read_access - public, authenticated or private, write_access - authenticated or private

    Requires authentication

/api/users/:id/documents

  • GET

    Returns an array of all belonging to the user with id :id

    Subject to the conditions and query string options of GET /api/documents/:id

/api/documents/:id

  • GET

    Returns the user with id :id.

  • PUT

    Updates the the document with id :id

    Requires the document not to be private or belong to the authenticated user.

    Optional fields: title, content

    Requires authentication

  • DELETE

    Deletes the document with id :id.

    Requires the authenticated user to be either the owner of the document or an admin.

    Requires authentication

/api/documents/:id/access

  • PUT

    Updates the access options of the document with id :id

    Requires the authenticated user to be the owner of the document.

    Optional fields: read_access - public, authenticated or private, write_access - authenticated or private

    Requires authentication

/api/users/:id

  • GET

    Returns the user with id :id.

  • PUT

    Updates the user with id :id.

    Requires that the user being updated is the authenticated user.

    Optional fields: first_name, last_name, email, username

    Requires authentication

  • DELETE

    Deletes the user with id :id. Requires that the user being deleted is the authenticated user.

    Requires authentication

/api/users/:id/password

  • PUT

    Updates the password for the user with id :id. Requires that the user being updated is the authenticated user.

    Required fields: old_password, password

/api/users/:id/role

  • PUT

    Updates the role of the user with id :id.

    Required fields: role - the title of the role to assign the user e.g. admin

    Requires authentication, Requires admin

/api/roles

  • GET

    Returns an array of all roles.

/api/roles/:id

  • GET

    Returns the role with id :id.

  • PUT

    Updates the role with id :id.

    Optional fields: description

    Requires authentication, Requires admin

/api/roles/:id/users

  • GET

    Returns an array of all users with the role with id :id.

    Requires authentication, Requires admin