johnnyq
e6daf00528
Fix some broken API calls after RBAC update
2026-07-25 16:59:03 -04:00
johnnyq
c509b7f693
Add user-based RBAC for API keys
...
API keys now run as a user and inherit that user's module, operation, and client permissions. Drops per-key client scoping and removes existing keys (must be recreated). Adds an edit modal to change a key's user.
2026-07-25 16:50:58 -04:00
johnnyq
9d540f4bfe
Replace Function customAction() with triggerCustomAction()
2026-07-14 17:43:55 -04:00
johnnyq
f1836c70cd
Replace Function logAction() with logAudit()
2026-07-14 17:35:23 -04:00
johnnyq
b57ddc0e5c
Replace Function sanitizeInput() with just escapeSql() and update all instances throughout
2026-07-14 17:17:50 -04:00
johnnyq
319ccbad01
Revert "API: Add some missing end points"
...
This reverts commit c4ba2bc326
2026-04-16 15:16:08 -04:00
johnnyq
f94458690e
API: Remove Payment Endpoint for now
2026-04-12 11:26:56 -04:00
johnnyq
c4ba2bc326
API: Add some missing end points
2026-04-11 18:21:03 -04:00
johnnyq
1e02322382
API: Invoice_items only return if item_id or invoice_id is specified and do not return all invoice items
2026-04-11 17:57:22 -04:00
johnnyq
ed564f64ff
Merge branch 'develop' of github.com:itflow-org/itflow into develop
2026-04-11 13:33:30 -04:00
johnnyq
830f40edee
API: Add Invoice Items read endpoint
2026-04-11 13:32:50 -04:00
wrongecho
ec9a148e97
API - Fix documents not falling back to DB values
2026-04-09 16:07:44 +01:00
wrongecho
5efdfc53ff
Asset API - History
2026-04-09 15:25:21 +01:00
wrongecho
20be416fa6
API
...
- Fix credential errors since field names changed
- Sort domains properly
2026-04-04 11:20:52 +01:00
wrongecho
4617f44cda
- Prevent error 500s when existing data can't be cleanly re-inserted to database
2026-04-04 11:01:34 +01:00
wrongecho
0ae4c2fac9
- Prevent error 500s when existing data can't be cleanly re-inserted to database
...
- Full support for asset_uri_2
2026-04-04 10:52:32 +01:00
wrongecho
9389f2cc91
More helpful error
2026-04-04 10:49:50 +01:00
wrongecho
52c2ba69cb
Don't set client ID from POST - this is properly done via require_post_method instead only if it's an all-clients key.
2026-04-04 10:49:40 +01:00
wrongecho
8591758cd7
Fix asset read api - uri_2
2026-04-04 10:18:21 +01:00
Mads Iversen
62fb2c91a1
feat: Add API endpoint to retrieve time worked by technicians on tickets with filtering by date and technician.
2026-02-09 12:09:56 +00:00
wrongecho
e1a93035fd
Undo client scoping uses = instead of LIKE in tickets resolve.php --- see forum thread 2667
2026-01-28 14:57:28 +00:00
wrongecho
c0b7a26905
API bugfixes before release:
...
- apiEncryptLoginEntry should be apiEncryptCredentialEntry
- Client scoping uses = instead of LIKE in tickets resolve.php
2026-01-28 14:48:41 +00:00
johnnyq
0a658d7cab
Fix Document Update API
2026-01-17 13:17:17 -05:00
johnnyq
0a30300bde
replace all instances of mysqli_fetch_array with mysqli_fetch_assoc for better performance and memory usage
2026-01-14 17:30:23 -05:00
johnnyq
a79ce23ae5
Fix randomString() to generate cryptographically secure URL-safe tokens, reduced url keys to 32 Characters for performance and easy copy and paste and compatibility while still mainitaining ubreakable cryptographic keys
2025-12-18 14:24:53 -05:00
johnnyq
99e2487d2b
Fix dupe race condition with ticket, invoice, quote, project, recurring ticket numbering when being created in parallel Atomically update and get the next ticket number in one SQL query everywhere.
2025-11-28 14:14:46 -05:00
johnnyq
1a9a36829b
Process base64 Images for document creation and editing for the API and Client Portal
2025-11-24 00:14:27 -05:00
johnnyq
9f19fd3c75
Fix Folder in Document API End point
2025-11-08 13:10:35 -05:00
wrongecho
283c2a17df
sanitize after substr
2025-11-06 16:44:34 +00:00
wrongecho
650a099e19
Contacts API - Prevent more than 1 primary contact being set per client
2025-11-06 16:00:21 +00:00
wrongecho
46c2c8616e
Clients API - Add - abbreviation support
2025-11-06 15:35:43 +00:00
wrongecho
6295a5c878
Clients API - Update endpoint
2025-11-06 15:34:19 +00:00
wrongecho
39d8e19e16
Clients API - Archiving & Un-archiving
2025-11-06 15:21:45 +00:00
wrongecho
9d3a44d110
Contacts API - Archiving & Un-archiving
2025-11-06 15:10:25 +00:00
wrongecho
54d46719c2
Certificates API - Create endpoint
2025-11-06 14:46:08 +00:00
wrongecho
2f28f96f8d
Log the API endpoint/URL path for API auth failures to assist with debugging
2025-11-06 14:43:32 +00:00
johnnyq
35a7506c26
Copy crons from /scripts to /cron, added custom directories for api/v1/, /setup, /cron and /scripts
2025-10-07 13:55:54 -04:00
wrongecho
e7dcc6df3c
Tickets API - Add ability to resolve ticket in post request with only a ticket ID and client ID via resolve.php endpoint
2025-09-23 09:28:27 +01:00
johnnyq
9caa42975d
rename get_settings.php to load_global_settings.php and update all requires
2025-08-06 17:48:23 -04:00
wrongecho
7c558ff842
Add location create endpoint
2025-07-07 13:47:17 +01:00
wrongecho
873dc1f76d
Fix contact location if not provided in api call
2025-07-01 11:50:20 +01:00
wrongecho
effbf241e6
Fix default rate and net terms if not provided in api call
2025-07-01 10:51:56 +01:00
johnnyq
0ca28dc630
Fix Document API to not insert a new document upon update as we changed the way documents and document versions are handled
2025-06-26 17:30:34 -04:00
johnnyq
8196706538
Ticket API: Allow HTML into ticket Content and allow inserting asset_id
2025-06-26 17:13:27 -04:00
johnnyq
e7e7272002
Migrated Vendor Templates to its own table, lots of code modifications here
2025-06-17 22:44:54 -04:00
wrongecho
e1f212d30d
Start recording ticket source (API, Email, Portal, Agent)
2025-04-28 14:51:38 +01:00
wrongecho
eadfdc41c4
Tickets api - allow setting the billable status when creating a ticket
2025-03-27 14:45:44 +00:00
wrongecho
421abd4c5b
Tickets api - bugfix 500 error
2025-03-27 14:34:36 +00:00
johnnyq
f1783a6110
update credential model
2025-03-12 22:35:13 -04:00
johnnyq
c8c1155c9c
Update the API for the new cred var names
2025-03-12 22:33:06 -04:00
