Smugmug API 1.3.0

MSkaffariMSkaffari Registered Users Posts: 147 Major grins
The newest version of SmugMug's API improves security while making it easier for you to use. Here's how:

New features:

We've added sessionless anonymous access to certain API methods. This means you no longer need to login through the API to access public content on SmugMug. As before, privacy levels dictate what content is available through the API, so, for example, passworded sites require you to provide the correct password to access the galleries. From now on, APIKey is required and SessionID is optional. All methods that don't require authorization will be available as long as you have an APIKey for your application.

We have also added the possibility to transfer server-to-server session to your customers browser. This is created to support an application that manages user, gallery or sharegroup authentication and subsequently re-directs the users browser into the corresponding site or gallery without the need to re-enter the credentials.

Methods related to session transfer:

smugmug.accounts.browse
smugmug.albums.browse
smugmug.sharegroups.browse

Deprecated features:

In light of the changes to authenticated access we are deprecating the methods related to Basic Authentication. The methods are:

smugmug.login.withPassword
smugmug.login.withHash

Upgrade instructions:

In order to take advantage of the new API you should start using the new endpoints;

JSON
- http://api.smugmug.com/services/api/json/1.3.0/
- https://secure.smugmug.com/services/api/json/1.3.0/
PHP
- http://api.smugmug.com/services/api/php/1.3.0/
- https://secure.smugmug.com/services/api/php/1.3.0/
REST
- http://api.smugmug.com/services/api/rest/1.3.0/
- https://secure.smugmug.com/services/api/rest/1.3.0/
XML-RPC
- http://api.smugmug.com/services/api/xmlrpc/1.3.0/
- https://secure.smugmug.com/services/api/xmlrpc/1.3.0/
Applications that currently use SessionID to access methods that doesn't require user authentication should be modified to include APIKey in the requests. The methods related to basic authentication should be removed and all access that requires authorization by the user should be implemented using OAuth.

Timeline:

SmugMug API 1.3.0 is available at the time of this announcement. The API has been available as beta for quite some time and based on user feedback and our internal testing we have decided to make this official.

SmugMug API 1.2.2 will be available and we will continue to fix issues in it, but after this we will not be adding new functionality to it. All new functionality will be added to new versions of the API. It is recommended that you update your applications to use the new API as soon as possible. If any API versions are deprecated in the future, stay tuned to our API forums on Digital Grin or check in on our blog.

Comments

Sign In or Register to comment.