On Fri, Apr 24, 2020, at 9:30 AM, Stephen J. Turnbull wrote:
Shashikanth Komandoor writes:
I am developing an application on which just clicking on submitwith some input values loaded should invoke the REST API of Mailman 3 running on another server and do some activities like adding of user(s) to a list or removal of user(s) from a list or so.
Is it possible to do so ? If so, how ?It's possible. The REST API itself is documented here:
https://mailman.readthedocs.io/en/latest/src/mailman/rest/docs/rest.html
I haven't tried the examples with curl, but they probably should work; I don't think you need any special HTTP headers or anything like that.
Except for HTTP basic auth, which you can usually just do with "--user" parameter in curl instead of creating the "Authorization" header and it's base64 encoded username password value yourself.
The "another server" part is possible, but a bad idea in production because the REST API is 100% not authenticated. Security is maintained by running any applications that access the REST API on the same host. If you really want to do this, it's explained in this thread:
https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/M...
Note that the context of this thread is a development environment and the idea is to restrict access to a small LAN.
Steve
Mailman-Developers mailing list -- mailman-developers@python.org To unsubscribe send an email to mailman-developers-leave@python.org https://mail.python.org/mailman3/lists/mailman-developers.python.org/ Mailman FAQ: https://wiki.list.org/x/AgA3
Security Policy: https://wiki.list.org/x/QIA9
-- thanks, Abhilash Raj (maxking)