It should cache for an hour, I think (based on a quick look at nodebb package manager code). So yes - you have to wait a bit before the nbbpm refreshes. You can just install the updated version manually by using npm install <package name> from the command line in NodeBB folder.
Write-enabled API (Brainstorming)
Re: The Road to v0.5.0 and Beyond -- Write APIs
Lots of people have written in to let us know that they want deeper integration with NodeBB in some form. Right now, that's possible through plugins, although it's got a fairly high barrier to entry (you'd have to learn Node.js, for one, and lots of people aren't willing to do that).
We always mention that we have a public "read-only" API available for consumption (like this one!), though it'd be nice if a JSON/RPC write API were added so applications can ping NodeBB to add topics by sending a POST.
- The Write API will be available as a plugin
- This plugin is not going to make it in for v0.5.0, sorry
- Security will always be an issue
- I was thinking basic key-based authentication (create a key in the ACP page, send that key in the POST body for authentication)
- HTTPS will be required, although right now I can't think of a way to force it (or detect if it's in use...)
- IP based limitation would also be there, so you can limit requests to 127.0.0.1, for example
- Does anyone have need for OAuth authentication? Seems like a lot of extra work for little gain.
- Functionality would more or less mimic what's available with NodeBB
- Topic creation
- Topic posting
(Writing this is making me think about webhooks as well, but I've already got enough on my plate )
Enable read/write API, the better, notification of new topic / real time streaming. For developer make it like registering an application, have an API key and secret, REST-styled API / JSON.
For normal user they provided options whether to install the application.
Thanks for your thoughts -- for most admins, they wouldn't want a write API layer installed, so it's strictly an opt-in process. Better for security, anyhow -- no holes to exploit if the entire layer isn't even there, right?
I'll have to look into key/secret vs. just key. It would be pointless to require a secret in addition to a key for a client-facing app (since the code could just be decompiled to find the secret), plus there's a bit of a development cost to supporting it as well (encrypting and decrypting using secret, etc...)
I did a quick search through the NPM and here are some MIT Licensed modules can could be used or drawn upon for inspiration.
Isn't the API write already ? I mean I used it to store the settings of my plugin maybe you mean without having to use a plugin. This could be a good thing but this means also needing some access token and in that case maybe could we have a super user token (for accessing hidden information like core groups) and a user token for normal interractions.
I could need a integration of NodeBB to my planned site.
Read topics, boards and user info should be no problem. NodeBB read only API seems to do that job.
But is it possible to process login or user registration via API (in the future)? My php application could try to check NodeBB login / user. If NodeBB login via API was successfully also the CMS user gets logged in. If the user doesn't exist at CMS side (not logged in before) an account would be created.
So my website could use NodeBB user backend if login / logout via API will be possible in the future
HTTPS shouldn't be needed because the api call comes from the local machine?
Not so far...
Looks nice at NodeBB blog
If I need a comment integration that will be a great solution!
But my main site also works with authentification and permissions. So I have to sync login state / user accounts.
The main site is Processwire based and I'm build a login module. So the module (php coded) need to process a NodeBB login and get a result about success.
I haven't any experience with nodejs / nodebb coding, so I don't know how it could be done.
So I have to sync login state / user accounts.
Have a look at this plugin:
You will likely have to modify it a bit to fit your solution, but it's definitely doable
Would be nice to encode the api at user experience. like restfull.
have a 'createNewCategory' topic inside 'admTool' category, if a mod write a respod with "footbal & rugby" the api create a new category named 'footbal & rugby'.
Each category has a '/proc' topic to acces api funcion over .this category.
to chance my photo i could go to admTool/chPic topic and upload a image.
if the api is themeble can pack the adm routine like moderated or not. Can be 'monarchyed', the api just accept the call of the King login.