API: Add authz features for RESTBase
authorBrad Jorsch <bjorsch@wikimedia.org>
Thu, 29 Jan 2015 20:14:40 +0000 (12:14 -0800)
committerBrad Jorsch <bjorsch@wikimedia.org>
Thu, 19 Feb 2015 21:45:03 +0000 (16:45 -0500)
commit4b8b0358ebca88abe8aa933becc5fd917d1799f4
tree84fa28a4022d3137922fe88758c760c9e9c06a06
parentcf90ab794b3b75c6f7ed464d9036755df2875158
API: Add authz features for RESTBase

The RESTBase team has requested the ability to check the validity of a
CSRF token and to interface with Title::userCan().

The former is accomplished by the new action=checktoken module. The
latter by a new parameter ('testactions') to the existing prop=info.

Bug: T88010
Change-Id: I2530f1315ec93f5be9fb437137992150fdc305f2
RELEASE-NOTES-1.25
autoload.php
includes/User.php
includes/api/ApiCheckToken.php [new file with mode: 0644]
includes/api/ApiMain.php
includes/api/ApiQueryInfo.php
includes/api/i18n/en.json
includes/api/i18n/qqq.json