Question about REST API for Mailman 3

Hi team,
I am developing an application on which just clicking on submit
with some input values loaded should invoke the REST API of Mailman 3 running on another server and do some activities like adding of user(s) to a list or removal of user(s) from a list or so.
Is it possible to do so ? If so, how ?
-- Thanks & Regards, Shashi Kanth.K 9052671936
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

Is it possible through CURL command in combination with some other parameters?
If possible please mention an example of adding a member to a mailman 2 DL.
I am really clueless.
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
On Fri, Apr 24, 2020 at 8:19 PM Shashikanth Komandoor < shashikanth.komandoor@gmail.com> wrote:
Hi team,
I am developing an application on which just clicking on submit
with some input values loaded should invoke the REST API of Mailman 3 running on another server and do some activities like adding of user(s) to a list or removal of user(s) from a list or so.
Is it possible to do so ? If so, how ?
-- Thanks & Regards, Shashi Kanth.K 9052671936
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#m_-7325779880407563152_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
-- Thanks & Regards, Shashi Kanth.K 9052671936

Shashikanth Komandoor writes:
I am developing an application on which just clicking on submit
with some input values loaded should invoke the REST API of Mailman 3 running on another server and do some activities like adding of user(s) to a list or removal of user(s) from a list or so.
Is it possible to do so ? If so, how ?
It's possible. The REST API itself is documented here:
https://mailman.readthedocs.io/en/latest/src/mailman/rest/docs/rest.html
I haven't tried the examples with curl, but they probably should work; I don't think you need any special HTTP headers or anything like that.
The "another server" part is possible, but a bad idea in production because the REST API is 100% not authenticated. Security is maintained by running any applications that access the REST API on the same host. If you really want to do this, it's explained in this thread:
https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/M...
Note that the context of this thread is a development environment and the idea is to restrict access to a small LAN.
Steve

On Fri, Apr 24, 2020, at 9:30 AM, Stephen J. Turnbull wrote:
Shashikanth Komandoor writes:
I am developing an application on which just clicking on submit
with some input values loaded should invoke the REST API of Mailman 3 running on another server and do some activities like adding of user(s) to a list or removal of user(s) from a list or so.
Is it possible to do so ? If so, how ?
It's possible. The REST API itself is documented here:
https://mailman.readthedocs.io/en/latest/src/mailman/rest/docs/rest.html
I haven't tried the examples with curl, but they probably should work; I don't think you need any special HTTP headers or anything like that.
Except for HTTP basic auth, which you can usually just do with "--user" parameter in curl instead of creating the "Authorization" header and it's base64 encoded username password value yourself.
The "another server" part is possible, but a bad idea in production because the REST API is 100% not authenticated. Security is maintained by running any applications that access the REST API on the same host. If you really want to do this, it's explained in this thread:
https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/M...
Note that the context of this thread is a development environment and the idea is to restrict access to a small LAN.
Steve
Mailman-Developers mailing list -- mailman-developers@python.org To unsubscribe send an email to mailman-developers-leave@python.org https://mail.python.org/mailman3/lists/mailman-developers.python.org/ Mailman FAQ: https://wiki.list.org/x/AgA3
Security Policy: https://wiki.list.org/x/QIA9
-- thanks, Abhilash Raj (maxking)
participants (3)
-
Abhilash Raj
-
Shashikanth Komandoor
-
Stephen J. Turnbull