<?php

/**
 * @package tikiwiki
 */

// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
//
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id$

/**
 * API front controller
 * Handle authentication, input/output serialization and send for service broken processing.
 */

define('TIKI_API', true);

// Tiki uses SESSION internally a lot but API shouldn't allow initializing the session from a cookie
// API requests are stateless and also we turn off CSRF protection
ini_set('session.use_cookies', 0);

require_once('tiki-setup.php');

if ($prefs['auth_api_tokens'] !== 'y') {
    TikiLib::lib('access')->display_error('API', 'Service not enabled.', 403);
}

$bridge = new Services_ApiBridge($jitRequest);
$bridge->handle();