f2a7662e95
Be more verbose in which tables are imported during teleporter importing
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-04-02 21:59:45 +02:00
e3c4dcf215
Restructure API response from /history/clients and /history/database/clients to allow for sparse data.
...
Add new config option webserver.api.client_history_global_max controling if the activities chart should sort and show the *global* (integrated over 24 hours) or the `local` (measured individually in each time slot) most active clients
Allow setting webserver.api.maxClients to 0 to always return all clients in /api/history/clients
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-02-16 17:15:20 +01:00
933e6f605f
Merge pull request #1728 from pi-hole/tweak/query_auth
...
Add authentication via query string
2024-01-07 07:50:58 +01:00
2dbb7f3b63
Merge pull request #1731 from pi-hole/fix/dhcp-range
...
Improve DHCP handling
2023-11-16 22:25:09 +01:00
503c0538ed
IPv4 address 0.0.0.0 and IPv6 address :: correspond to empty strings in FTL settings
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-16 12:43:47 +01:00
a69130585e
Use package ipaddress for IP address validation in API tests
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-15 11:49:03 +01:00
90de6c1b83
Merge pull request #1727 from pi-hole/fix/toml_utf8
...
Declare pihole.toml as UTF-8 document
2023-11-14 22:25:04 +01:00
11127f0f13
Fix OpenAPI checker not being able to discover properties that are returned by FTL but not documented in the OpenAPI specs
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-04 17:11:37 +01:00
75cd372d0e
Add string format verification in API checker
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-04 12:38:24 +01:00
a96c283c0c
Add authentication via query string
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-03 19:41:08 +01:00
f1c59db0f6
Declare pihole.toml as UTF-8 document. we add a compile-time switch to use ASCII with UTF-8 escaping instead in case this is a necessity for anyone (I don't really expect this in the third millenial but we also know people are still using Windows XP on the web...)
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-03 10:12:07 +01:00
d805bd75f4
Update test/api/checkAPI.py
...
Co-authored-by: yubiuser <ckoenig@posteo.de >
Signed-off-by: DL6ER <DL6ER@users.noreply.github.com >
2023-11-03 06:47:32 +01:00
15ae21e39c
Clarify error wording
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-02 05:55:27 +01:00
3a67a77a08
Report number of checked endpoints in the result and warn if the number of specified endpoints in FTL and the OpenAPI specs do not match
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-02 05:50:32 +01:00
5993b66bca
Add checking of all endpoints defined in FTL but not in the OpenAPI specs and vice versa
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-11-02 05:28:07 +01:00
f4e6dfc061
Implement deep-recursion of API arrays
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-10-30 07:42:51 +01:00
2141db3d64
Add rate-limiting on password login attempts
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-10-07 19:59:32 +02:00
da544dcbb2
Change default webport to 80
...
Signed-off-by: Christian König <ckoenig@posteo.de >
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-08-01 15:54:20 +02:00
813509841b
Accept cookie authentication only when CSRF header is provided (and correct)
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-06-04 19:29:54 +02:00
62cfc25b95
Fix spelling in v6
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-05-30 22:42:13 +02:00
19c72d354e
!!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-05-30 21:22:45 +02:00
149ec4e0dd
Add test for re-importing the just exported Teleporter file during the tests
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-26 20:11:55 +01:00
48fc06d46b
Add POST /api/teleporter to upload and install backed up configuration
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-25 21:51:12 +01:00
e4383775d1
Add /api/action/gravity which can be used to trigger a run of pihole -g. The output is live streamed using HTTP/1.1 chunked encoding.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-24 20:15:45 +01:00
13168c377b
Add GET /api/teleporter
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-23 21:56:11 +01:00
88e8ab9fd5
!!! BREAKING CHANGE !!! Redesign TOML config structure
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-22 12:32:10 +01:00
47ac129a53
!!! BREAKING CHANGE !!! Rename pihole-FTL.toml to pihole.toml and it is a Pi-hole wide config file also covering all the dnsmasq settings, etc.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-22 10:01:54 +01:00
2d6c25d573
Add GET /config/{element} for more specific requests as well as PATCH and DELETE /config/{element}/{value} for direct array manipulation
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-18 18:19:19 +01:00
c34975180e
Rename /api/ftl/endpoints -> /api/endpoints
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-16 21:37:11 +01:00
5e96022e63
Group endpoints in /api/ftl/endpoints by supported methods
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-16 21:11:57 +01:00
140a365806
Tests: Set api.pwhash and dns.blocking.mode using PATCH /api/config
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-08 21:29:55 +01:00
f199ac2f08
Automatically migrate the API password hash and the lists of clients and domains to be excluded from setupVars.conf
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-08 21:21:38 +01:00
1414e0d397
Ensure checkAPI.py also accepts situations with localAPIauth = false
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-08 20:59:18 +01:00
4ac52263e9
Implement login for python API checking script
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-08 16:04:26 +01:00
3c5c1d52b7
Transform log_debug() into a function-like macro to save some time when we are not in debugging mode (the function is not called in this case)
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-08 09:55:51 +01:00
b8354c515c
Fix debug flag parsing after changing from bit-wise flags to individual bools
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-07 20:08:38 +01:00
8efd253529
Merge remote-tracking branch 'origin/development' into new/http
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-07 18:37:13 +01:00
e145d20d28
Rewrite the entire config-related code to allow for changing data without having to restart. Hereby, we greatly reduce code duplication in the TOML routines so we won't have to touch tme in the future when adding additional options.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-07 18:06:41 +01:00
6d7239dbc8
Add example verification when (possibly multiple) global examples are provided below the schema level
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-03 22:08:55 +01:00
f2d68f20d7
Also verify endpoint structure: Query endpoints from FTL and check if all properties mentioned in the docs are present (and of correct type) and that there are no extra properties we forgot to document. Furthermore, also verify that the provided examples are of correct type, too.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-03 21:51:13 +01:00
c7803df604
Add /api/stats/upstreams and /api/stats/database/upstreams documentation
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-02 21:19:11 +01:00
8df3500c83
Move /api/ftl/gateway -> /api/network/gateway, /api/ftl/interfaces -> /api/network/interfaces, /api/ftl/network -> /api/network/devices, and /api/ftl/config -> /api/config and add documentation for /api/network/devices
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-02 20:52:13 +01:00
69aaa71c97
Improve checkAPI.py script (add handling of {kind} URI variables)
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-02 20:41:21 +01:00
ab5722e2a4
Accelerate checkAPI script by ensuring we parse each YAML at most once
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-02 20:16:01 +01:00
bd5519c6bf
Add API checking script
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-01 20:34:40 +01:00
fcbe840804
Also allow authentication by sending SID via HEADER
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2021-02-03 09:08:23 +01:00
1ae67e8fbb
Also use OpenAPI-enforcer to check the OpenAPI specs in addition
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2021-02-01 13:56:27 +01:00
DL6ER
Dominik
Christian König