Code

Add journalist interface API#3619

Code

Merged

emkll merged 71 commits intodevelopfreedomofpress/securedrop:developfrom journalist-api-0.9.0freedomofpress/securedrop:journalist-api-0.9.0Copy head branch name to clipboardJul 24, 2018

+1,977-35

Commits

Commits on Jun 23, 2018

• Journalist API: Add initial Blueprint with root endpoint

  Show description for 4e90665
  redshiftzero

  committed
  4e90665

• Remove deprecated autoversion

  redshiftzero

  committed
  8068543

• Journalist API: Rework login by default logic

  Show description for b10dbe3
  redshiftzero

  committed
  b10dbe3

• Journalist interface: Add 403 error handler

  Show description for 55241d9
  redshiftzero

  committed
  55241d9

• Journalist API: Add endpoint to do API token auth

  redshiftzero

  committed
  0a7fcbb

• Journalist API: Use decorator for protected API endpoints

  redshiftzero

  committed
  3402155

• Journalist API: Add pytest fixture for journalist API token

  redshiftzero

  committed
  efad309

• Journalist API /sources/: placeholders and get_all_sources()

  redshiftzero

  committed
  98d43d2

• Test source pytest fixture: Add submissions for convenience

  redshiftzero

  committed
  efe2726

• Journalist API: Add security test cases for HTTP GETs

  redshiftzero

  committed
  dac442c

• Journalist API: Security test cases for HTTP DELETEs

  redshiftzero

  committed
  79e5b60

Commits on Jun 29, 2018

• Journalist API: Add security test cases for HTTP POSTs

  redshiftzero

  committed
  f6a42c5

• Journalist interface: Add 404 error handler

  Show description for 35d032e
  redshiftzero

  committed
  35d032e

• Journalist API: Add single source endpoint (/sources/<int:id>)

  redshiftzero

  committed
  d32da8d

• Journalist API: Add star endpoint: /sources/<int:source_id>/star/

  Show description for 73e0aa7
  redshiftzero

  committed
  73e0aa7

• Journalist API: Remove star endpoint: /sources/<int:source_id>/star/

  Show description for 122664e
  redshiftzero

  committed
  122664e

• Journalist API: Catch itsdangerous.BadData only

  Show description for 8b425db
  redshiftzero

  committed
  8b425db

• Journalist interface: Add 405 error handler

  Show description for 8ae05b1
  redshiftzero

  committed
  8ae05b1

• Journalist API: Get all submissions [/submissions/]

  redshiftzero

  committed
  3504688

• Journalist API: GET a source's submissions [/source/:id/submissions]

  redshiftzero

  committed
  1324687

• Journalist API: GET a single submission [/sources/:id/submissions/:id]

  redshiftzero

  committed
  b4e9bb2

• Journalist API: DELETE individual source submission

  redshiftzero

  committed
  d2c1ce3

• Journalist API: DELETE source collection

  redshiftzero

  committed
  1fef4da

• Journalist API: Add endpoint to download PGP submissions

  redshiftzero

  committed
  15baf24

Commits on Jul 6, 2018

• Journalist API: Add /user endpoint for user information

  redshiftzero

  committed
  4fc88f7

• Journalist API: Rework token_required, add unit tests

  Show description for 244ff82
  redshiftzero

  committed
  244ff82

• Journalist API: Add pre-encrypted source reply endpoint

  redshiftzero

  committed
  4f93e8f

• Journalist API: Reject plaintext replies server-side

  Show description for 6d069a8
  redshiftzero

  committed
  6d069a8

• Journalist API: API should provide armored pubkey of source

  redshiftzero

  committed
  7adb254

• Journalist interface: Add 400 error handler

  redshiftzero

  committed
  4596452

• Journalist API: cleanup and use same slug as journalist interface

  Show description for d6765c8
  redshiftzero

  committed
  d6765c8

• Journalist API: Refactor error handling

  Show description for 024ff35
  redshiftzero

  committed
  024ff35

• Journalist API: Expiration date should be consistent

  Show description for 1d43208
  redshiftzero

  committed
  1d43208

• Journalist API: Developer documentation

  Show description for 183cc3b
  redshiftzero

  committed
  183cc3b

• Journalist API: Update last_access metadata with token auth

  Show description for eea5e9e
  redshiftzero

  committed
  eea5e9e

• AppArmor: Update apache2 profile for journalist API

  redshiftzero

  committed
  b2729f8

• Journalist API: Remove trailing slashes from all URLs

  redshiftzero

  committed
  2621cf4

• Journalist API: Use generic 400 for rejected plaintext reply

  redshiftzero

  committed
  3be0707

• Journalist API: [], {} are valid JSON

  redshiftzero

  committed
  586769a

• Journalist API: Return ISO8601 format expiraton from /token

  redshiftzero

  committed
  2002347

• Journalist API: Add public_key_type field for futureproofing

  redshiftzero

  committed
  978f584

• Use generic error handlers for Werkzeug's default_exceptions

  Show description for 8cf6024
  redshiftzero

  committed
  8cf6024

• Journalist API: Rename verify_api_token for clarity

  redshiftzero

  committed
  3ab39c7

• Journalist API: Rename password->passphrase for clarity

  redshiftzero

  committed
  3908748

• Journalist API: Modify URI for delete collection endpoint

  Show description for 545c9d1
  redshiftzero

  committed
  545c9d1

• Journalist API: Implement flag for reply

  redshiftzero

  committed
  02432ed

• Journalist API: Add helper auth function

  redshiftzero

  committed
  b490778

• Journalist API: Make get_or_404 clearer

  redshiftzero

  committed
  172e0fb

• Journalist API: Refactor exception handling on get_token

  redshiftzero

  committed
  b6ad7cd

• Journalist API: Settle on method for detected plaintext

  redshiftzero

  committed
  e11cf0f

• Resolve mypy issues on werkzeug.exceptions.default_exceptions

  Show description for f34f08c
  redshiftzero

  committed
  f34f08c

• Journalist API: Add security test case for none alg

  redshiftzero

  committed
  0d86a30

• Journalist API: Add security test case for deleted user

  redshiftzero

  committed
  0b9f6c6

Commits on Jul 7, 2018

• Journalist API: Update sources fields

  Show description for 785d4d2
  redshiftzero

  committed
  785d4d2

• Journalist API: Add test case for trailing slash on end of URL

  Show description for 8685884
  redshiftzero

  committed
  8685884

Commits on Jul 17, 2018

• Journalist API: Increase API token expiration for UX reasons

  Show description for 52d6c5a
  redshiftzero

  committed
  52d6c5a

• Journalist API: Return ISO 8601 compliant dates from API

  redshiftzero

  committed
  c324abe

• Journalist API: Create Source.uuid column

  redshiftzero

  committed
  daecdd7

• Alembic: Support batch operations for database migrations

  Show description for b6d239e
  redshiftzero

  committed
  b6d239e

• Bugfix: Upgrade test should be on old database, then load data

  Show description for 8f385a9
  redshiftzero

  committed
  8f385a9

• API docs: Update for UUID change

  redshiftzero

  committed
  664be6e

• Database migration: Add migration and tests for source UUID column

  redshiftzero

  committed
  ebe1553

• updated schema check to handle whitespace differences

  Show description for b5447d7
  

  heartsucker

  authored and

  redshiftzero

  committed
  b5447d7

• Alembic tests: Be more lenient with schema equality check

  Show description for 25cec03
  redshiftzero

  committed
  25cec03

• Journalist API: Also use UUID for submissions

  Show description for 900f3b3
  redshiftzero

  committed
  900f3b3

• Journalist API: Add ETag header containing SHA256 hash of data

  Show description for 7e7a447
  redshiftzero

  committed
  7e7a447

• Remove unnecessary _insecure_api_views

  redshiftzero

  committed
  5ab60f7

• Journalist API tests: Ensure root endpoint exposes all endpoints

  redshiftzero

  committed
  dc21b3c

Commits on Jul 18, 2018

• Indicate source.public_key setter and deleter are not implemented

  redshiftzero

  committed
  1b852b0

• Journalist API tests: Add submissions fixture

  Show description for 57dd181
  redshiftzero

  committed
  57dd181

• Journalist API: Only show pending=False sources

  Show description for e42c7f1
  redshiftzero

  committed
  e42c7f1