API Documentation for Yclas sites
This is the official API Documentation for Yclas. With this API you will be able to extend the usage of your site, for example with native iOS and Android apps.
To use the API you will need a Yclas Cloud website or a Yclas Sel-Hosted Pro website. More information here.
More information regarding our native iOS and Android apps please visit our page.
- About
- Authentication
- Public Resources
- Authenticated by API Key Resources
- Authenticated by User Key Resources
REST
This API uses REST as principle. Allowed methods are GET,POST, PUT and DELETE.
Best practices and inspiration by Vinay and Simon. Used kohana-restful-api as code base.
NOTE: You may need to disable mod_security to receive DELETE or PUT methods.
Routes
We use routes similar to a crud system but they are mapped to actions internally.
Base route:
/api/v1/<controller>(/<action>(/<id>))(.<format>
Parameters between () are optional.
Example:
POST /api/v1/categories/update/3
Is the same as:
PUT /api/v1/categories/3
Mapping of actions:
- GET => index
- PUT => update
- POST => create
- DELETE => delete
In case you do not specify an action and you are using and ID, we swap the values internally.
Output
The API supports different outputs. By default all will be returned as JSON but other outputs are available such:
- JSON
- CSV
- XML
- HTML
Example of usage:
GET /api/v1/categories/3.xml
get category 3 data as XMLGET /api/v1/categories/3.json
get category 3 data as JSONGET /api/v1/categories/3
get category 3 data as JSONGET /api/v1/category.csv
get all categories as CSV
Result filtering, sorting & searching
This are sent as parameter (Post or Query) to the endpoint.
Filter
You can pass any field we indicate in the documentation, E.G:
GET /api/v1/category?id_category_parent=1&has_image=1
This gets the categories that the parent is = 1 and have image.
Allowed operators >=
(greater or equal), <=
(less or equal), !=
(different than) and __between
.
To user the operator __between
the value needs to be comma separated, and the field needs to get appended __between
ex:
GET /api/v1/listings?price__between=100,303
This will filter ads with field price
bigger or equal than 100 and smaller or equal to 303.
Sorting
Similar to filtering, a generic parameter sort can be used to describe sorting rules. The sort parameter takes in list of comma separated fields, each with a possible unary negative to imply descending sort order. Let's look at some examples:
GET /api/v1/listings?sort=-published
- Retrieves a list of tickets in descending published dateGET /api/v1/listings?sort=-published,title
- Retrieves a list of ads in descending order of published date and by title of the add
Searching
Besides filtering on some endpoints you will be allowed to make a search using the q
parameter.
GET /api/v1/listings?q=something+to+search
Pagination
You can paginate any result by using the params page (number of page) and items_per_page (elements to display).
GET /api/v1/listings?q=something+to+search&page=3&items_per_page=10
We return X-Total-Count
header with the total amount of elements found and a header link
with next ,prev ,last ,first links.
Limiting fields returned
Limiting which fields are returned by the API
GET /api/v1/listings?fields=id,subject,customer_name,updated_at&state=open&sort=-updated_at
Remember: You can use all this parameters together
GET /api/v1/listings?q=something+to+search&status>=1&id_category=77&sort=-title,price&page=3&items_per_page=10
Authentication
This API uses 3 different kind of endpoints. 2 are authenticated and 1 does not require any kind.
We highly recommend usage of HTTPS to make all the request encripted and safer.
API Key of your installation
In order to use some api endpoint you will be required to have an API Key of your site.
Here's how you can obtain the API Key:
- Login at your classifieds site.
- Go to Settings->General.
- Check for Key API.
That's your api_key
for your site to use in further requests. E.G:
GET /api/v1/listing/3?apikey=ajdnasjdlk_iym
We recommend sending the apikey using a header.
User API Token
Some of the API points are user based actions, so we need the specific API key user_token
of the user in order to login the user for the request and filter the results.
Here's how you can obtain the API Token:
- Use Login User end point using your
apikey
- Store
user_token
somewhere safe - Any future request include
user_token=asndadnasdm
to authenticate the user
Example:
DELETE /api/v1/favorites/5?user_token=adjkdfnkji_iuie13
We recommend sending the user_token using a header.
Public Resources
This API endpoints do not require any kind of authentication, therefore are public.
Categories
Retrieve all the categories, you can filter, sort etc. Theres no pagination here.
GET /api/v1/categories
Example, get categories with deep = 1 , those that are to display on home page:
GET /api/v1/categories?parent_deep=1
Display all the siblings of a category
GET /api/v1/categories?id_category_parent=2
Get single category info. This includes all the fields of the category + siblings + thumb and parents of the category.
GET /api/v1/categories/3
Extra: Retrieve all the categories using different array format.
GET /api/v1/categories/all
Locations
Retrieve all the locations, you can filter, sort etc. Theres no pagination here.
GET /api/v1/locations
Example, get locations with deep = 1 , those that are to display on home page:
GET /api/v1/locations?parent_deep=1
Display all the siblings of a location
GET /api/v1/locations?id_location_parent=2
Get single category info. This includes all the fields of the location + siblings + thumb the location.
GET /api/v1/locations/3
Extra: Retrieve all the locations using different array format.
GET /api/v1/locations/all
Custom fields ads
This is meta information regarding extra fields for the Advertisement. Will return all the custom fields for all the categories.
GET /api/v1/customfields/ads
For a specific ad:
GET /api/v1/ads/6
in the array customfield
.
GET /api/v1/listings/6
in the array customfield
.
Custom fields category
If we want the custom fields of an ad for a specific category we can use the id_category:
GET /api/v1/customfields/category/6
OR
GET /api/v1/categories/6
in the array customfield
.
Custom fields users
This is meta information regarding extra fields for the user. This returns all the custom fields the user can have.
GET /api/v1/customfields/user
Authenticated by API Key Resources
To use this resources/endpoints you will need a an API Key that you get here.
We use the parameter apikey
to send this information.
Create User
Used to register a new user.
POST /api/v1/auth
Params
- name
- password (optional, if not set we will generate one)
Result
We return an array with the user information. You need to use user_token
.
In case of error message will be returned. 401.
Login User
Using this method we will get an Auth Key for hte user to perform other actions on the API.
GET /api/v1/auth
OR POST /api/v1/auth/login
Query Params
- password
- apikey
- device_id (optional, used for push notifications on mobile apps with GCM)
Example
GET /api/v1/auth?email=someemail@gmail.com&password=1234&apikey=SsrLIhDSmXjCHmp9SsrLIhDSmXjCHmp9
Result
We return a user
array that we will use all the authenticated api request based on this on user_token
. Store it somewhere safe. This key is unique per user.
"user_token":"06f8bbb8c7da102e5decf0820fb0d6c0b282d637"
In case user not found, or not apikey provided we will return the correct message and HTTP status.
{"code":401,"error":"Wrong Api Key"}
{"code":401,"error":"Wrong user name or password"}
Social Login User
Only working from OC 3.0 or higher.
Using this method we will get an Auth Key for the user to perform other actions on the API.
GET /api/v1/auth/social
Query Params
- apikey
- device_id (optional, used for push notifications on mobile apps with GCM)
- token
- social_network
Example
GET /api/v1/auth/social?email=someemail@gmail.com&token=1234&social_network=google&apikey=SsrLIhDSmXjCHmp9SsrLIhDSmXjCHmp9
Result
We return a user
array that we will use all the authenticated api request based on this on user_token. Store it somewhere safe. This key is unique per user.
"user_token":"06f8bbb8c7da102e5decf0820fb0d6c0b282d637"
In case user not found user will be created.
Listings
This returns published ads.
GET /api/v1/listings
Example, get published ads of user 5 in category 7, sorted by created date:
GET /api/v1/listings?id_user=5&id_category=7&sort=-created
Get ads closer to the user using latitude and longitude
GET /api/v1/listings?longitude=41.4075167&latitude=2.204625299999975&sort=distance
This will add an extra value return named distance
which will return the KM to the add from the location.
Example with more parameters, pagination, sorted etc...
GET /api/v1/listings?q=something+to+search&id_category=77&sort=-title,price&page=3&items_per_page=10
Remember we return the pagination and total count on headers
Returns the info of a single Ad, only if published.
GET /api/v1/listings/3
List Users
Returns a list of users.
GET /api/v1/users/
You can filter, sort and has pagination.
User info
Public information of user.
GET /api/v1/users/5
Orders
Get all orders, you can filter, search, paginate...
GET /api/v1/orders
Example :
Get all orders for a specific users
GET /api/v1/orders?id_user=1
Get all paid orders
GET /api/v1/orders?status=1
You can filter by - id_order - id_user - id_ad - id_product - paymethod - created - pay_date - currency - amount - status - txn_id - featured_days - id_coupon
Get 1 order by ID
GET /api/v1/orders/6
Create an order
Mandatory , id_user, id_ad, id_product (see get products)
For example, it will create an order for user 1 and ad 5 for product 1. Will be marked as paid immediately.
POST /api/v2/orders/create?id_user=1&id_ad=5&id_product=1
You can overrite some defaults:
- amount - will create the order with this amount, useful if price is different
- currency - in case paid in a different currrency
- txn_id - transaction id provided by the payment gateway, nice to have
Get products
GET /api/v1/orders/products
Blog posts
Get all blog posts, you can filter, search, paginate...
GET /api/v1/blog
You can filter by - id_post - id_user - locale - title - seotitle - description - created
Get 1 blog by ID
GET /api/v1/blog/6
Pages
Get all pages, you can filter and search.
GET /api/v1/pages
You can filter by - id_content - locale - title - seotitle - description - created
Get 1 page by ID
GET /api/v1/pages/6
FAQs
Get all faq, you can filter and search.
GET /api/v1/faqs
You can filter by - id_content - locale - title - seotitle - description - created
Get 1 faq by ID
GET /api/v1/faqs/6
Translations
Available from yclas v4.
This will return the translation texts of your website. By default you will get the translations for the "apps"
Get locales
Returns all the locales for the site and also we get then the last change to the translation was done.
GET /api/v1/translation/
"locales": {
"ar": {
"name": "Arabic",
"last_update_apps": "1588677099",
"last_update_messages": null
},
if last_update_XXX is null, was never saved. So if you already got the translations no need to get them again. If there's a timestamp then was updated that moment. You should store last time that you read the translation to be able to compare later.
Get translations by locale
GET /api/v1/translation/translate/it_IT
To get all translations even not translated specify the all parameter to 1.
GET /api/v1/translation/translate/it_IT?all=1
To get the "web" translations set "file=messages", by default will return "apps".
GET /api/v1/translation/translate/it_IT?file=messages
Translate a phrase
GET /api/v1/translation/translate/nl_NL?q=search
Authenticated by User Key Resources
To use this resources/endpoints you will need a user_token
that you get here.
This will identify the user for any request.
Profile
Edit Profile
PUT /api/v1/profile
Possible params:
- name
- description
- password
Edit Profile Picture
POST /api/v1/profile/picture
Requires parameter profile_image
.
Returns TRUE is succeded, message if not.
Delete Profile Picture
DELETE /api/v1/profile/picture_delete
Returns TRUE is succeded, FALSE if not.
Advertisement
User Advertisements
GET /api/v1/ads
Will return the ads of the user loged in. Perfect to list them so he can edit etc..
New Advertisement
POST /api/v1/ads
Params
- id_user
- id_category
- id_location (optional)
- title
- description
- address (optional)
- price (optional)
- phone (optional)
- website (optional)
- stock (numeric optional)
- latitude (optional)
- longitude (optional)
You can post custom fields as post Like cf_nameofthefield
Return
If all is good you get:
{
message: "Advertisement is posted. Congratulations!"
checkout_url: ""
}
Message is what we need to show the client, since it's different in each site. checkout_url, in case this is set is the URL we need to open for the client to pay.
You should validate data before posting, but theres a validation error:
{
code: 500
error: "Category must not be empty - Title must not be empty - "
}
Edit Advertisement
Edit ad number 5
PUT /api/v1/ads/5
Params
- id_category
- id_location (optional)
- title
- description
- address (optional)
- price (optional)
- phone (optional)
- website (optional)
- stock (numeric optional)
- latitude (optional)
- longitude (optional)
You can edit custom fields sending the CF name like cf_nameofthefield
Return
If all is good you get:
{
message: "Advertisement is posted. Congratulations!"
checkout_url: ""
}
Message is what we need to show the client, since it's different in each site. checkout_url, in case this is set is the URL we need to open for the client to pay.
You should validate data before posting, but theres a validation error:
` { code: 500 error: "Category must not be empty - Title must not be empty - " }
Add image Advertisement
POST /api/v1/ads/image/ID_AD
Params
- image
Will add the image, adding it as last in order.
Delete image Advertisement
DELETE /api/v1/ads/delete_image/ID_AD
Params
- num_image
Delete Advertisement
Deactivates the form from the database.
DELETE /api/v1/ads/5
Returns TRUE or FALSE
Favorites
Get all Favorite Advertisement
GET /api/v1/favorites
Will return us the info of the favorites for the user. ID_AD when was created and the title to use it to display it ;)
Favorite Advertisement
We use the ID_AD to delete the favorite, as well as creating it.
Favorite ad 5
POST /api/v1/favorites/5
Delete favorite for ad 6
DELETE /api/v1/favorites/6
Messages
The messsages are already filteres by the user_token. Only his messages will be visible.
Get all Messages
GET /api/v1/messages
Returns all the messages (threads) for the users ordered by update. Result may include id_ad = NULL, if that is the case its a direct message to the user not to an Advertisement.
You can filter by params:
- id_ad
- id_user_from
- status (0= not read, 1= read)
Examples:
This are the messages received to Advertisement 5 from older to newer.
GET /api/v1/messages?id_ad=5&sort=-created
This will get the threads started by user 3.
GET /api/v1/messages?id_user_from=3
Show unread messages ordered by when was created/replied. (see unread shortcut), not recommended.
GET /api/v1/messages?id_user_to=2&status=0&sort=-created
Pagination also available. Read more here.
Get Unread Messages
Shortcut: This will return the threads that user has not read yet. We filter by id_user_to and status=0.
GET /api/v1/messages/unread
Allows filters, sorting and pagination.
Get Thread Messages
IMPORTANT: The ID we use to retrieve all the thread is always id_message_parent , not id_message.
GET /api/v1/messages/5
Returns all the messages for that threat. Marks all of them as read if it is the destinatary the first time we read. Ordered by date asc.
Send Message
Every time they contact a user / ad a new thread is created. Only reply will attach to the previous one.
Will return the message as array if succeded or FALSE if there was any error.
Message to Advertisement:
POST /api/v1/messages
Params
- id_ad
- message
- price (optional)
Direct Message User:
POST /api/v1/messages
Params
- id_user
- message
Reply Message:
POST /api/v1/messages
Params
- id_message_parent (id of the thread)
- message
- price (optional)