This API is designed and intended to be used for Android (iOS to come soon) apps that are focused on the social aspect. It can be used as a starting point for authenticating users, allowing users to search for and add friends.

Users will be notified when they have a friend request via Push notifications.

It will authenticate with both Facebook and standalone manually created users. So your app can have the option to sign in with facebook OR create an account.

Now you can upload the api/ directory to your server of choice and configure it. To do that you will edit config.ini that looks like what you see below.

All of the configurations should be relatively self explanatory. I would recommend you change the md5_salt to something else, unique to your app.

[globals]

DEBUG=3

; Database info
dbname="YOUR_DB_NAME"
dbuser="YOUR_DB_USER"
dbpass="YOUR_DB_PASS"

; The salt that gets sprinkled in to md5 encryptions
md5_salt="3498hjf32kr"

; Your API key for google places API
google_places_api_key="YOUR_API_KEY"

; Cache time
cache_time=900

; The fallback photo if a profile photo could not be found for a user
default_user_photo="http://yourdomain.com/default-user-photo.png"

app_name="Super Cool Fun App"

; Your facebook app information
facebook_app_id="YOUR_FACEBOOK_APP_ID"
facebook_app_secret="YOUR_FACEBOOK_APP_SECRET"

; SMTP / Email information for sending emails. This framework uses PHPMailer
smtp_host="localhost"
smtp_port=25
email_from='email@yourdomain.com'
email_from_name='Your Name'

; The referer that will be passed along with CURL requests
curl_referer="http://yourdomain.com"

When possible, three different header arguments should always be passed along with each API request:

All end points return a JSON response, in a format like the below. When the status is below 0, there is a problem. The problem will always be explained in a field named "status_explanation"

[Incomplete] more documentation coming. Any endpoint that is a link has documentation.

• /user/sign-up
• /user/fb-ping
• /user/sign-in
• /user/get-info
• /user/edit-information
• /user/data-update
• /user/add-friend
• /user/accept-friend
• /user/ignore-friend
• /user/get-friends
• /user/reset-pass
• /find-users
• /user/@id
• /achievements BETA

POST /user/sign-up
Signs up a user

POST /user/fb-ping
With a Facebook ID, this endpoint figures out whether the facebook user is in your datadase or not, then signs up or signs in accordingly

POST /user/sign-in
With a Facebook ID, this endpoint figures out whether the facebook user is in your datadase or not, then signs up or signs in accordingly

PLEASE READ This endpoint will take two forms of signing the user in. Either a username and password OR a hash token. The hash token should be provided to the API via a header named "Token". The reason for this is because most API calls rely on the token header to not only authenticate, but to get information about the user.

If you are accustomed to building Cordova / Phonegap applications such as I, you may use jQuery to submit your network requests. Here is an example of signing in a user using jQuery:

$.ajax({
	url: 'http://yourdomain.com/api/user/sign-in',
	cache: false,
	localCache: false,
	isCacheValid : false,
	timeout: 5000,
	dataType: 'json',
	type: 'POST',
	beforeSend: function(request) {
		// Send token as header
	  request.setRequestHeader("Token", get_user_token());

	  // Send Registration as header
	  request.setRequestHeader("RegistrationID", get_registration_id());

	  // Send Facebook session (if there is one)
	  if( window.cordova ) {
	    request.setRequestHeader("FacebookAccessToken", get_facebook_session());
	  }
	},
	complete: function(){},
	error: function(jqXHR, textStatus) {
	   alert('We can\'t process your request. Please try again.');
	},
	success: function(response) {
		if(response && response.status > 0) {
      if(app.debug) console.log('Successful auto sign in');
      app.signed_in = true;
      // redirect somewhere
    } else {
      if(app.debug) console.log('Could not auto sign in');
    }
	}
});