greader.php 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748
  1. <?php
  2. /**
  3. == Description ==
  4. Server-side API compatible with Google Reader API layer 2
  5. for the FreshRSS project http://freshrss.org
  6. == Credits ==
  7. * 2014-03: Released by Alexandre Alapetite http://alexandre.alapetite.fr
  8. under GNU AGPL 3 license http://www.gnu.org/licenses/agpl-3.0.html
  9. == Documentation ==
  10. * http://code.google.com/p/pyrfeed/wiki/GoogleReaderAPI
  11. * http://web.archive.org/web/20130718025427/http://undoc.in/
  12. * http://ranchero.com/downloads/GoogleReaderAPI-2009.pdf
  13. * http://code.google.com/p/google-reader-api/w/list
  14. * http://blog.martindoms.com/2009/10/16/using-the-google-reader-api-part-2/
  15. * https://github.com/noinnion/newsplus/blob/master/extensions/GoogleReaderCloneExtension/src/com/noinnion/android/newsplus/extension/google_reader/GoogleReaderClient.java
  16. * https://github.com/ericmann/gReader-Library/blob/master/greader.class.php
  17. * https://github.com/devongovett/reader
  18. * https://github.com/theoldreader/api
  19. */
  20. require('../../constants.php');
  21. require(LIB_PATH . '/lib_rss.php'); //Includes class autoloader
  22. $ORIGINAL_INPUT = file_get_contents('php://input', false, null, -1, 1048576);
  23. if (PHP_INT_SIZE < 8) { //32-bit
  24. function dec2hex($dec) {
  25. return str_pad(gmp_strval(gmp_init($dec, 10), 16), 16, '0', STR_PAD_LEFT);
  26. }
  27. function hex2dec($hex) {
  28. return gmp_strval(gmp_init($hex, 16), 10);
  29. }
  30. } else { //64-bit
  31. function dec2hex($dec) { //http://code.google.com/p/google-reader-api/wiki/ItemId
  32. return str_pad(dechex($dec), 16, '0', STR_PAD_LEFT);
  33. }
  34. function hex2dec($hex) {
  35. return hexdec($hex);
  36. }
  37. }
  38. function headerVariable($headerName, $varName) {
  39. $header = '';
  40. $upName = 'HTTP_' . strtoupper($headerName);
  41. if (isset($_SERVER[$upName])) {
  42. $header = $_SERVER[$upName];
  43. } elseif (isset($_SERVER['REDIRECT_' . $upName])) {
  44. $header = $_SERVER['REDIRECT_' . $upName];
  45. } elseif (function_exists('getallheaders')) {
  46. $ALL_HEADERS = getallheaders();
  47. if (isset($ALL_HEADERS[$headerName])) {
  48. $header = $ALL_HEADERS[$headerName];
  49. }
  50. }
  51. parse_str($header, $pairs);
  52. return isset($pairs[$varName]) ? $pairs[$varName] : null;
  53. }
  54. function multiplePosts($name) { //https://bugs.php.net/bug.php?id=51633
  55. global $ORIGINAL_INPUT;
  56. $inputs = explode('&', $ORIGINAL_INPUT);
  57. $result = array();
  58. $prefix = $name . '=';
  59. $prefixLength = strlen($prefix);
  60. foreach ($inputs as $input) {
  61. if (strpos($input, $prefix) === 0) {
  62. $result[] = urldecode(substr($input, $prefixLength));
  63. }
  64. }
  65. return $result;
  66. }
  67. class MyPDO extends Minz_ModelPdo {
  68. function prepare($sql) {
  69. return $this->bd->prepare(str_replace('%_', $this->prefix, $sql));
  70. }
  71. }
  72. function logMe($text) {
  73. file_put_contents(join_path(USERS_PATH, '_', 'log_api.txt'), date('c') . "\t" . $text . "\n", FILE_APPEND);
  74. }
  75. function debugInfo() {
  76. if (function_exists('getallheaders')) {
  77. $ALL_HEADERS = getallheaders();
  78. } else { //nginx http://php.net/getallheaders#84262
  79. $ALL_HEADERS = '';
  80. foreach ($_SERVER as $name => $value) {
  81. if (substr($name, 0, 5) === 'HTTP_') {
  82. $ALL_HEADERS[str_replace(' ', '-', ucwords(strtolower(str_replace('_', ' ', substr($name, 5)))))] = $value;
  83. }
  84. }
  85. }
  86. global $ORIGINAL_INPUT;
  87. return print_r(array('date' => date('c'), 'headers' => $ALL_HEADERS, '_SERVER' => $_SERVER, '_GET' => $_GET, '_POST' => $_POST, '_COOKIE' => $_COOKIE, 'INPUT' => $ORIGINAL_INPUT), true);
  88. }
  89. function badRequest() {
  90. logMe("badRequest()");
  91. logMe(debugInfo());
  92. header('HTTP/1.1 400 Bad Request');
  93. header('Content-Type: text/plain; charset=UTF-8');
  94. die('Bad Request!');
  95. }
  96. function unauthorized() {
  97. logMe("unauthorized()");
  98. logMe(debugInfo());
  99. header('HTTP/1.1 401 Unauthorized');
  100. header('Content-Type: text/plain; charset=UTF-8');
  101. header('Google-Bad-Token: true');
  102. die('Unauthorized!');
  103. }
  104. function notImplemented() {
  105. logMe("notImplemented()");
  106. logMe(debugInfo());
  107. header('HTTP/1.1 501 Not Implemented');
  108. header('Content-Type: text/plain; charset=UTF-8');
  109. die('Not Implemented!');
  110. }
  111. function serviceUnavailable() {
  112. logMe("serviceUnavailable()");
  113. header('HTTP/1.1 503 Service Unavailable');
  114. header('Content-Type: text/plain; charset=UTF-8');
  115. die('Service Unavailable!');
  116. }
  117. function checkCompatibility() {
  118. logMe("checkCompatibility()");
  119. header('Content-Type: text/plain; charset=UTF-8');
  120. if (PHP_INT_SIZE < 8 && !function_exists('gmp_init')) {
  121. die('FAIL 64-bit or GMP extension!');
  122. }
  123. if ((!array_key_exists('HTTP_AUTHORIZATION', $_SERVER)) && //Apache mod_rewrite trick should be fine
  124. (!array_key_exists('REDIRECT_HTTP_AUTHORIZATION', $_SERVER)) && //Apache mod_rewrite with FCGI
  125. (empty($_SERVER['SERVER_SOFTWARE']) || (stripos($_SERVER['SERVER_SOFTWARE'], 'nginx') === false)) && //nginx should be fine
  126. (empty($_SERVER['SERVER_SOFTWARE']) || (stripos($_SERVER['SERVER_SOFTWARE'], 'lighttpd') === false)) && //lighttpd should be fine
  127. ((!function_exists('getallheaders')) || (stripos(php_sapi_name(), 'cgi') !== false))) { //Main problem is Apache/CGI mode
  128. die('FAIL getallheaders! (probably)');
  129. }
  130. echo 'PASS';
  131. exit();
  132. }
  133. function authorizationToUser() {
  134. $headerAuth = headerVariable('Authorization', 'GoogleLogin_auth'); //Input is 'GoogleLogin auth', but PHP replaces spaces by '_' http://php.net/language.variables.external
  135. if ($headerAuth != '') {
  136. $headerAuthX = explode('/', $headerAuth, 2);
  137. if (count($headerAuthX) === 2) {
  138. $user = $headerAuthX[0];
  139. if (ctype_alnum($user)) {
  140. FreshRSS_Context::$user_conf = get_user_configuration($user);
  141. if (FreshRSS_Context::$user_conf == null) {
  142. Minz_Log::warning('Invalid API user ' . $user . ': configuration cannot be found.');
  143. unauthorized();
  144. }
  145. if ($headerAuthX[1] === sha1(FreshRSS_Context::$system_conf->salt . $user . FreshRSS_Context::$user_conf->apiPasswordHash)) {
  146. return $user;
  147. } else {
  148. logMe('Invalid API authorisation for user ' . $user . ': ' . $headerAuthX[1]);
  149. Minz_Log::warning('Invalid API authorisation for user ' . $user . ': ' . $headerAuthX[1]);
  150. unauthorized();
  151. }
  152. } else {
  153. badRequest();
  154. }
  155. }
  156. }
  157. return '';
  158. }
  159. function clientLogin($email, $pass) { //http://web.archive.org/web/20130604091042/http://undoc.in/clientLogin.html
  160. //logMe('clientLogin(' . $email . ")");
  161. if (ctype_alnum($email)) {
  162. if (!function_exists('password_verify')) {
  163. include_once(LIB_PATH . '/password_compat.php');
  164. }
  165. FreshRSS_Context::$user_conf = get_user_configuration($email);
  166. if (FreshRSS_Context::$user_conf == null) {
  167. Minz_Log::warning('Invalid API user ' . $email . ': configuration cannot be found.');
  168. unauthorized();
  169. }
  170. if (FreshRSS_Context::$user_conf->apiPasswordHash != '' && password_verify($pass, FreshRSS_Context::$user_conf->apiPasswordHash)) {
  171. header('Content-Type: text/plain; charset=UTF-8');
  172. $auth = $email . '/' . sha1(FreshRSS_Context::$system_conf->salt . $email . FreshRSS_Context::$user_conf->apiPasswordHash);
  173. echo 'SID=', $auth, "\n",
  174. 'Auth=', $auth, "\n";
  175. exit();
  176. } else {
  177. Minz_Log::warning('Password API mismatch for user ' . $email);
  178. unauthorized();
  179. }
  180. } else {
  181. badRequest();
  182. }
  183. die();
  184. }
  185. function token($conf) {
  186. //http://blog.martindoms.com/2009/08/15/using-the-google-reader-api-part-1/
  187. //https://github.com/ericmann/gReader-Library/blob/master/greader.class.php
  188. $user = Minz_Session::param('currentUser', '_');
  189. //logMe('token('. $user . ")"); //TODO: Implement real token that expires
  190. $token = str_pad(sha1(FreshRSS_Context::$system_conf->salt . $user . $conf->apiPasswordHash), 57, 'Z'); //Must have 57 characters
  191. echo $token, "\n";
  192. exit();
  193. }
  194. function checkToken($conf, $token) {
  195. //http://code.google.com/p/google-reader-api/wiki/ActionToken
  196. $user = Minz_Session::param('currentUser', '_');
  197. //logMe('checkToken(' . $token . ")");
  198. if ($token === str_pad(sha1(FreshRSS_Context::$system_conf->salt . $user . $conf->apiPasswordHash), 57, 'Z')) {
  199. return true;
  200. }
  201. unauthorized();
  202. }
  203. function tagList() {
  204. //logMe("tagList()");
  205. header('Content-Type: application/json; charset=UTF-8');
  206. $pdo = new MyPDO();
  207. $stm = $pdo->prepare('SELECT c.name FROM `%_category` c');
  208. $stm->execute();
  209. $res = $stm->fetchAll(PDO::FETCH_COLUMN, 0);
  210. $tags = array(
  211. array('id' => 'user/-/state/com.google/starred'),
  212. //array('id' => 'user/-/state/com.google/broadcast', 'sortid' => '2'),
  213. );
  214. foreach ($res as $cName) {
  215. $tags[] = array(
  216. 'id' => 'user/-/label/' . $cName,
  217. //'sortid' => $cName,
  218. );
  219. }
  220. echo json_encode(array('tags' => $tags)), "\n";
  221. exit();
  222. }
  223. function subscriptionList() {
  224. //logMe("subscriptionList()");
  225. header('Content-Type: application/json; charset=UTF-8');
  226. $pdo = new MyPDO();
  227. $stm = $pdo->prepare('SELECT f.id, f.name, f.url, f.website, c.id as c_id, c.name as c_name FROM `%_feed` f
  228. INNER JOIN `%_category` c ON c.id = f.category');
  229. $stm->execute();
  230. $res = $stm->fetchAll(PDO::FETCH_ASSOC);
  231. $salt = FreshRSS_Context::$system_conf->salt;
  232. $subscriptions = array();
  233. foreach ($res as $line) {
  234. $subscriptions[] = array(
  235. 'id' => 'feed/' . $line['id'],
  236. 'title' => $line['name'],
  237. 'categories' => array(
  238. array(
  239. 'id' => 'user/-/label/' . $line['c_name'],
  240. 'label' => $line['c_name'],
  241. ),
  242. ),
  243. //'sortid' => $line['name'],
  244. //'firstitemmsec' => 0,
  245. 'url' => $line['url'],
  246. 'htmlUrl' => $line['website'],
  247. 'iconUrl' => Minz_Url::display('/f.php?' . hash('crc32b', $salt . $line['url']), '', true),
  248. );
  249. }
  250. echo json_encode(array('subscriptions' => $subscriptions)), "\n";
  251. exit();
  252. }
  253. function subscriptionEdit($streamNames, $titles, $action, $add = '', $remove = '') {
  254. //logMe("subscriptionEdit()");
  255. //https://github.com/mihaip/google-reader-api/blob/master/wiki/ApiSubscriptionEdit.wiki
  256. switch ($action) {
  257. case 'subscribe':
  258. case 'unsubscribe':
  259. case 'edit':
  260. break;
  261. default:
  262. badRequest();
  263. }
  264. $addCatId = 0;
  265. $categoryDAO = null;
  266. if ($add != '' || $remove != '') {
  267. $categoryDAO = new FreshRSS_CategoryDAO();
  268. }
  269. if ($add != '' && strpos($add, 'user/-/label/') === 0) { //user/-/label/Example
  270. $c_name = basename($add);
  271. $cat = $categoryDAO->searchByName($c_name);
  272. $addCatId = $cat == null ? -1 : $cat->id();
  273. } else if ($remove != '' && strpos($remove, 'user/-/label/')) {
  274. $addCatId = 1; //Default category
  275. }
  276. $feedDAO = FreshRSS_Factory::createFeedDao();
  277. for ($i = count($streamNames) - 1; $i >= 0; $i--) {
  278. $streamName = $streamNames[$i]; //feed/http://example.net/sample.xml ; feed/338
  279. if (strpos($streamName, 'feed/') === 0) {
  280. $streamName = basename($streamName);
  281. $feedId = 0;
  282. if (ctype_digit($streamName)) {
  283. if ($action === 'subscribe') {
  284. continue;
  285. }
  286. $feedId = $streamName;
  287. } else {
  288. $feed = $feedDAO->searchByUrl($streamName);
  289. $feedId = $feed == null ? -1 : $feed->id();
  290. }
  291. $title = isset($titles[$i]) ? $titles[$i] : '';
  292. switch ($action) {
  293. case 'subscribe':
  294. if ($feedId <= 0) {
  295. //TODO
  296. notImplemented();
  297. } else {
  298. badRequest();
  299. }
  300. break;
  301. case 'unsubscribe':
  302. if (!($feedId > 0 && FreshRSS_feed_Controller::deleteFeed($feedId))) {
  303. badRequest();
  304. }
  305. break;
  306. case 'edit':
  307. if ($feedId > 0) {
  308. if ($addCatId > 0) {
  309. FreshRSS_feed_Controller::moveFeed($feedId, $addCatId);
  310. }
  311. if ($title != '') {
  312. FreshRSS_feed_Controller::renameFeed($feedId, $title);
  313. }
  314. } else {
  315. badRequest();
  316. }
  317. break;
  318. }
  319. }
  320. }
  321. exit('OK');
  322. }
  323. function unreadCount() { //http://blog.martindoms.com/2009/10/16/using-the-google-reader-api-part-2/#unread-count
  324. //logMe("unreadCount()");
  325. header('Content-Type: application/json; charset=UTF-8');
  326. $totalUnreads = 0;
  327. $totalLastUpdate = 0;
  328. $categoryDAO = new FreshRSS_CategoryDAO();
  329. foreach ($categoryDAO->listCategories(true, true) as $cat) {
  330. $catLastUpdate = 0;
  331. foreach ($cat->feeds() as $feed) {
  332. $lastUpdate = $feed->lastUpdate();
  333. $unreadcounts[] = array(
  334. 'id' => 'feed/' . $feed->id(),
  335. 'count' => $feed->nbNotRead(),
  336. 'newestItemTimestampUsec' => $lastUpdate . '000000',
  337. );
  338. if ($catLastUpdate < $lastUpdate) {
  339. $catLastUpdate = $lastUpdate;
  340. }
  341. }
  342. $unreadcounts[] = array(
  343. 'id' => 'user/-/label/' . $cat->name(),
  344. 'count' => $cat->nbNotRead(),
  345. 'newestItemTimestampUsec' => $catLastUpdate . '000000',
  346. );
  347. $totalUnreads += $cat->nbNotRead();
  348. if ($totalLastUpdate < $catLastUpdate) {
  349. $totalLastUpdate = $catLastUpdate;
  350. }
  351. }
  352. $unreadcounts[] = array(
  353. 'id' => 'user/-/state/com.google/reading-list',
  354. 'count' => $totalUnreads,
  355. 'newestItemTimestampUsec' => $totalLastUpdate . '000000',
  356. );
  357. echo json_encode(array(
  358. 'max' => $totalUnreads,
  359. 'unreadcounts' => $unreadcounts,
  360. )), "\n";
  361. exit();
  362. }
  363. function streamContents($path, $include_target, $start_time, $count, $order, $exclude_target, $continuation) {
  364. //http://code.google.com/p/pyrfeed/wiki/GoogleReaderAPI
  365. //http://blog.martindoms.com/2009/10/16/using-the-google-reader-api-part-2/#feed
  366. //logMe("streamContents($path, $include_target, $start_time, $count, $order, $exclude_target, $continuation)");
  367. header('Content-Type: application/json; charset=UTF-8');
  368. $feedDAO = FreshRSS_Factory::createFeedDao();
  369. $arrayFeedCategoryNames = $feedDAO->arrayFeedCategoryNames();
  370. switch ($path) {
  371. case 'reading-list':
  372. $type = 'A';
  373. break;
  374. case 'starred':
  375. $type = 's';
  376. break;
  377. case 'feed':
  378. $type = 'f';
  379. break;
  380. case 'label':
  381. $type = 'c';
  382. $categoryDAO = new FreshRSS_CategoryDAO();
  383. $cat = $categoryDAO->searchByName($include_target);
  384. $include_target = $cat == null ? -1 : $cat->id();
  385. break;
  386. default:
  387. $type = 'A';
  388. break;
  389. }
  390. switch ($exclude_target) {
  391. case 'user/-/state/com.google/read':
  392. $state = FreshRSS_Entry::STATE_NOT_READ;
  393. break;
  394. case 'user/-/state/com.google/unread':
  395. $state = FreshRSS_Entry::STATE_READ;
  396. break;
  397. default:
  398. $state = FreshRSS_Entry::STATE_ALL;
  399. break;
  400. }
  401. if (!empty($continuation)) {
  402. $count++; //Shift by one element
  403. }
  404. $entryDAO = FreshRSS_Factory::createEntryDao();
  405. $entries = $entryDAO->listWhere($type, $include_target, $state, $order === 'o' ? 'ASC' : 'DESC', $count, $continuation, new FreshRSS_Search(''), $start_time);
  406. $items = array();
  407. foreach ($entries as $entry) {
  408. $f_id = $entry->feed();
  409. if (isset($arrayFeedCategoryNames[$f_id])) {
  410. $c_name = $arrayFeedCategoryNames[$f_id]['c_name'];
  411. $f_name = $arrayFeedCategoryNames[$f_id]['name'];
  412. } else {
  413. $c_name = '_';
  414. $f_name = '_';
  415. }
  416. $item = array(
  417. 'id' => /*'tag:google.com,2005:reader/item/' .*/ dec2hex($entry->id()), //64-bit hexa http://code.google.com/p/google-reader-api/wiki/ItemId
  418. 'crawlTimeMsec' => substr($entry->id(), 0, -3),
  419. 'timestampUsec' => $entry->id(), //EasyRSS
  420. 'published' => $entry->date(true),
  421. 'title' => $entry->title(),
  422. 'summary' => array('content' => $entry->content()),
  423. 'alternate' => array(
  424. array('href' => $entry->link()),
  425. ),
  426. 'categories' => array(
  427. 'user/-/state/com.google/reading-list',
  428. 'user/-/label/' . $c_name,
  429. ),
  430. 'origin' => array(
  431. 'streamId' => 'feed/' . $f_id,
  432. 'title' => $f_name, //EasyRSS
  433. //'htmlUrl' => $line['f_website'],
  434. ),
  435. );
  436. if ($entry->author() != '') {
  437. $item['author'] = $entry->author();
  438. }
  439. if ($entry->isRead()) {
  440. $item['categories'][] = 'user/-/state/com.google/read';
  441. }
  442. if ($entry->isFavorite()) {
  443. $item['categories'][] = 'user/-/state/com.google/starred';
  444. }
  445. $items[] = $item;
  446. }
  447. if (!empty($continuation)) {
  448. array_shift($items); //Discard first element that was already sent in the previous response
  449. }
  450. $response = array(
  451. 'id' => 'user/-/state/com.google/reading-list',
  452. 'updated' => time(),
  453. 'items' => $items,
  454. );
  455. if ((count($entries) >= $count) && (!empty($entry))) {
  456. $response['continuation'] = $entry->id();
  457. }
  458. echo json_encode($response), "\n";
  459. exit();
  460. }
  461. function streamContentsItemsIds($streamId, $start_time, $count, $order, $exclude_target) {
  462. //http://code.google.com/p/google-reader-api/wiki/ApiStreamItemsIds
  463. //http://code.google.com/p/pyrfeed/wiki/GoogleReaderAPI
  464. //http://blog.martindoms.com/2009/10/16/using-the-google-reader-api-part-2/#feed
  465. //logMe("streamContentsItemsIds($streamId, $start_time, $count, $order, $exclude_target)");
  466. $type = 'A';
  467. $id = '';
  468. if ($streamId === 'user/-/state/com.google/reading-list') {
  469. $type = 'A';
  470. } elseif ('user/-/state/com.google/starred') {
  471. $type = 's';
  472. } elseif (strpos($streamId, 'feed/') === 0) {
  473. $type = 'f';
  474. $id = basename($streamId);
  475. } elseif (strpos($streamId, 'user/-/label/') === 0) {
  476. $type = 'c';
  477. $c_name = basename($streamId);
  478. $categoryDAO = new FreshRSS_CategoryDAO();
  479. $cat = $categoryDAO->searchByName($c_name);
  480. $id = $cat == null ? -1 : $cat->id();
  481. }
  482. switch ($exclude_target) {
  483. case 'user/-/state/com.google/read':
  484. $state = FreshRSS_Entry::STATE_NOT_READ;
  485. break;
  486. default:
  487. $state = FreshRSS_Entry::STATE_ALL;
  488. break;
  489. }
  490. $entryDAO = FreshRSS_Factory::createEntryDao();
  491. $ids = $entryDAO->listIdsWhere($type, $id, $state, $order === 'o' ? 'ASC' : 'DESC', $count, '', new FreshRSS_Search(''), $start_time);
  492. if (empty($ids)) { //For News+ bug https://github.com/noinnion/newsplus/issues/84#issuecomment-57834632
  493. $ids[] = 0;
  494. }
  495. $itemRefs = array();
  496. foreach ($ids as $id) {
  497. $itemRefs[] = array(
  498. 'id' => $id, //64-bit decimal
  499. );
  500. }
  501. echo json_encode(array(
  502. 'itemRefs' => $itemRefs,
  503. )), "\n";
  504. exit();
  505. }
  506. function editTag($e_ids, $a, $r) {
  507. //logMe("editTag()");
  508. foreach ($e_ids as $i => $e_id) {
  509. $e_ids[$i] = hex2dec(basename($e_id)); //Strip prefix 'tag:google.com,2005:reader/item/'
  510. }
  511. $entryDAO = FreshRSS_Factory::createEntryDao();
  512. switch ($a) {
  513. case 'user/-/state/com.google/read':
  514. $entryDAO->markRead($e_ids, true);
  515. break;
  516. case 'user/-/state/com.google/starred':
  517. $entryDAO->markFavorite($e_ids, true);
  518. break;
  519. /*case 'user/-/state/com.google/tracking-kept-unread':
  520. break;
  521. case 'user/-/state/com.google/like':
  522. break;
  523. case 'user/-/state/com.google/broadcast':
  524. break;*/
  525. }
  526. switch ($r) {
  527. case 'user/-/state/com.google/read':
  528. $entryDAO->markRead($e_ids, false);
  529. break;
  530. case 'user/-/state/com.google/starred':
  531. $entryDAO->markFavorite($e_ids, false);
  532. break;
  533. }
  534. exit('OK');
  535. }
  536. function markAllAsRead($streamId, $olderThanId) {
  537. //logMe("markAllAsRead($streamId, $olderThanId)");
  538. $entryDAO = FreshRSS_Factory::createEntryDao();
  539. if (strpos($streamId, 'feed/') === 0) {
  540. $f_id = basename($streamId);
  541. $entryDAO->markReadFeed($f_id, $olderThanId);
  542. } elseif (strpos($streamId, 'user/-/label/') === 0) {
  543. $c_name = basename($streamId);
  544. $categoryDAO = new FreshRSS_CategoryDAO();
  545. $cat = $categoryDAO->searchByName($c_name);
  546. $entryDAO->markReadCat($cat === null ? -1 : $cat->id(), $olderThanId);
  547. } elseif ($streamId === 'user/-/state/com.google/reading-list') {
  548. $entryDAO->markReadEntries($olderThanId, false, -1);
  549. }
  550. exit('OK');
  551. }
  552. //logMe('----------------------------------------------------------------');
  553. //logMe(debugInfo());
  554. $pathInfo = empty($_SERVER['PATH_INFO']) ? '/Error' : urldecode($_SERVER['PATH_INFO']);
  555. $pathInfos = explode('/', $pathInfo);
  556. Minz_Configuration::register('system',
  557. DATA_PATH . '/config.php',
  558. DATA_PATH . '/config.default.php');
  559. FreshRSS_Context::$system_conf = Minz_Configuration::get('system');
  560. if (!FreshRSS_Context::$system_conf->api_enabled) {
  561. serviceUnavailable();
  562. }
  563. Minz_Session::init('FreshRSS');
  564. $user = authorizationToUser();
  565. FreshRSS_Context::$user_conf = null;
  566. if ($user !== '') {
  567. FreshRSS_Context::$user_conf = get_user_configuration($user);
  568. }
  569. //logMe('User => ' . $user);
  570. Minz_Session::_param('currentUser', $user);
  571. if (count($pathInfos) < 3) {
  572. badRequest();
  573. }
  574. elseif ($pathInfos[1] === 'accounts') {
  575. if (($pathInfos[2] === 'ClientLogin') && isset($_REQUEST['Email']) && isset($_REQUEST['Passwd'])) {
  576. clientLogin($_REQUEST['Email'], $_REQUEST['Passwd']);
  577. }
  578. }
  579. elseif ($pathInfos[1] === 'reader' && $pathInfos[2] === 'api' && isset($pathInfos[3]) && $pathInfos[3] === '0' && isset($pathInfos[4])) {
  580. if ($user == '') {
  581. unauthorized();
  582. }
  583. $timestamp = isset($_GET['ck']) ? intval($_GET['ck']) : 0; //ck=[unix timestamp] : Use the current Unix time here, helps Google with caching.
  584. switch ($pathInfos[4]) {
  585. case 'stream':
  586. $exclude_target = isset($_GET['xt']) ? $_GET['xt'] : ''; //xt=[exclude target] : Used to exclude certain items from the feed. For example, using xt=user/-/state/com.google/read will exclude items that the current user has marked as read, or xt=feed/[feedurl] will exclude items from a particular feed (obviously not useful in this request, but xt appears in other listing requests).
  587. $count = isset($_GET['n']) ? intval($_GET['n']) : 20; //n=[integer] : The maximum number of results to return.
  588. $order = isset($_GET['r']) ? $_GET['r'] : 'd'; //r=[d|n|o] : Sort order of item results. d or n gives items in descending date order, o in ascending order.
  589. $start_time = isset($_GET['ot']) ? intval($_GET['ot']) : 0; //ot=[unix timestamp] : The time from which you want to retrieve items. Only items that have been crawled by Google Reader after this time will be returned.
  590. $continuation = isset($_GET['c']) ? $_GET['c'] : ''; //Continuation token. If a StreamContents response does not represent all items in a timestamp range, it will have a continuation attribute. The same request can be re-issued with the value of that attribute put in this parameter to get more items
  591. if (isset($pathInfos[5]) && $pathInfos[5] === 'contents' && isset($pathInfos[6])) {
  592. if (isset($pathInfos[7])) {
  593. if ($pathInfos[6] === 'feed') {
  594. $include_target = $pathInfos[7];
  595. StreamContents($pathInfos[6], $include_target, $start_time, $count, $order, $exclude_target, $continuation);
  596. } elseif ($pathInfos[6] === 'user' && isset($pathInfos[8]) && isset($pathInfos[9])) {
  597. if ($pathInfos[8] === 'state') {
  598. if ($pathInfos[9] === 'com.google' && isset($pathInfos[10])) {
  599. if ($pathInfos[10] === 'reading-list' || $pathInfos[10] === 'starred') {
  600. $include_target = '';
  601. streamContents($pathInfos[10], $include_target, $start_time, $count, $order, $exclude_target, $continuation);
  602. }
  603. }
  604. } elseif ($pathInfos[8] === 'label') {
  605. $include_target = $pathInfos[9];
  606. streamContents($pathInfos[8], $include_target, $start_time, $count, $order, $exclude_target, $continuation);
  607. }
  608. }
  609. } else { //EasyRSS
  610. $include_target = '';
  611. streamContents('reading-list', $include_target, $start_time, $count, $order, $exclude_target, $continuation);
  612. }
  613. } elseif ($pathInfos[5] === 'items') {
  614. if ($pathInfos[6] === 'ids' && isset($_GET['s'])) {
  615. $streamId = $_GET['s']; //StreamId for which to fetch the item IDs. The parameter may be repeated to fetch the item IDs from multiple streams at once (more efficient from a backend perspective than multiple requests).
  616. streamContentsItemsIds($streamId, $start_time, $count, $order, $exclude_target);
  617. }
  618. }
  619. break;
  620. case 'tag':
  621. if (isset($pathInfos[5]) && $pathInfos[5] === 'list') {
  622. $output = isset($_GET['output']) ? $_GET['output'] : '';
  623. if ($output !== 'json') notImplemented();
  624. tagList($output);
  625. }
  626. break;
  627. case 'subscription':
  628. if (isset($pathInfos[5])) {
  629. switch ($pathInfos[5]) {
  630. case 'list':
  631. $output = isset($_GET['output']) ? $_GET['output'] : '';
  632. if ($output !== 'json') notImplemented();
  633. subscriptionList($_GET['output']);
  634. break;
  635. case 'edit':
  636. if (isset($_POST['s']) && isset($_POST['ac'])) {
  637. $streamNames = multiplePosts('s'); //StreamId to operate on. The parameter may be repeated to edit multiple subscriptions at once
  638. $titles = multiplePosts('t'); //Title to use for the subscription. For the `subscribe` action, if not specified then the feed's current title will be used. Can be used with the `edit` action to rename a subscription
  639. $action = $_POST['ac']; //Action to perform on the given StreamId. Possible values are `subscribe`, `unsubscribe` and `edit`
  640. $add = isset($_POST['a']) ? $_POST['a'] : ''; //StreamId to add the subscription to (generally a user label)
  641. $remove = isset($_POST['r']) ? $_POST['r'] : ''; //StreamId to remove the subscription from (generally a user label)
  642. subscriptionEdit($streamNames, $titles, $action, $add, $remove);
  643. }
  644. break;
  645. }
  646. }
  647. break;
  648. case 'unread-count':
  649. $output = isset($_GET['output']) ? $_GET['output'] : '';
  650. if ($output !== 'json') notImplemented();
  651. $all = isset($_GET['all']) ? $_GET['all'] : '';
  652. unreadCount($all);
  653. break;
  654. case 'edit-tag': //http://blog.martindoms.com/2010/01/20/using-the-google-reader-api-part-3/
  655. $token = isset($_POST['T']) ? trim($_POST['T']) : '';
  656. checkToken(FreshRSS_Context::$user_conf, $token);
  657. $a = isset($_POST['a']) ? $_POST['a'] : ''; //Add: user/-/state/com.google/read user/-/state/com.google/starred
  658. $r = isset($_POST['r']) ? $_POST['r'] : ''; //Remove: user/-/state/com.google/read user/-/state/com.google/starred
  659. $e_ids = multiplePosts('i'); //item IDs
  660. editTag($e_ids, $a, $r);
  661. break;
  662. case 'mark-all-as-read':
  663. $token = isset($_POST['T']) ? trim($_POST['T']) : '';
  664. checkToken(FreshRSS_Context::$user_conf, $token);
  665. $streamId = $_POST['s']; //StreamId
  666. $ts = isset($_POST['ts']) ? $_POST['ts'] : '0'; //Older than timestamp in nanoseconds
  667. if (!ctype_digit($ts)) {
  668. $ts = '0';
  669. }
  670. markAllAsRead($streamId, $ts);
  671. break;
  672. case 'token':
  673. token(FreshRSS_Context::$user_conf);
  674. break;
  675. }
  676. } elseif ($pathInfos[1] === 'check' && $pathInfos[2] === 'compatibility') {
  677. checkCompatibility();
  678. }
  679. badRequest();