Project 404

GET /api or /api/docs

Returns this API documentation in JSON format.

Authentication: None required

Example Request:

curl https://4-0-4.io/api

POST /api/auth/login

Authenticate user credentials and get user information.

Authentication: Username/password required

Example Request:

curl -X POST -H "Content-Type: application/json" \
  -d '{"username":"testuser","password":"testpass"}' \
  https://4-0-4.io/api/auth/login

Example Response:

{
  "status": "success",
  "message": "Authentication successful",
  "data": {
    "user_id": 11,
    "username": "testuser",
    "is_admin": false
  }
}

POST /api/auth/keys

Generate a new API key for the authenticated user.

Authentication: Username/password required (cannot use API key to create another key)

Parameters:

• name (optional): Name for the API key (default: "API Key")
• expires_at (optional): Expiration date (YYYY-MM-DD HH:MM:SS, default: 1 year)

Example Request:

curl -X POST -H "Content-Type: application/json" \
  -d '{"username":"testuser","password":"testpass","name":"Production API Key"}' \
  https://4-0-4.io/api/auth/keys

Example Response:

{
  "status": "success",
  "message": "API key generated successfully",
  "data": {
    "id": 1,
    "key": "p404_abc123def456...",
    "name": "Production API Key",
    "expires_at": "2026-07-02 12:00:00"
  }
}

Important: Store this key securely! It will not be shown again.

GET /api/auth/keys

List all API keys for the authenticated user.

Authentication: Username/password or API key

Example Request:

curl -u "testuser:testpass" https://4-0-4.io/api/auth/keys

Example Response:

{
  "status": "success",
  "data": [
    {
      "id": 5,
      "key_prefix": "p404_5d106b3",
      "name": "test",
      "created_at": "2025-07-21 17:35:25",
      "last_used_at": null,
      "expires_at": "2026-07-21 17:35:25",
      "is_active": 1
    }
  ]
}

DELETE /api/auth/keys/{id}

Revoke (deactivate) an API key. The key will stop working immediately but remain in the database for audit purposes.

Authentication: Username/password or API key (different from the one being deleted)

Example Request:

curl -X DELETE -u "testuser:testpass" https://4-0-4.io/api/auth/keys/5

Example Response:

{
  "status": "success",
  "message": "API key revoked successfully"
}

DELETE /api/auth/keys/{id}/permanent

Permanently delete a revoked API key from the database. This can only be done on keys that are already revoked.

Authentication: Username/password or API key (different from the one being deleted)

Example Request:

curl -X DELETE -u "testuser:testpass" https://4-0-4.io/api/auth/keys/1/permanent

Example Response:

{
  "status": "success",
  "message": "API key deleted permanently"
}

Note: This action is irreversible. The key must be revoked first before it can be permanently deleted.

GET /api/links

Get all public bookmarks.

Authentication: None required

Example Request:

curl https://4-0-4.io/api/links

Example Response:

{
  "status": "success",
  "data": [
    {
      "id": 1,
      "title": "Example Site",
      "url": "https://example.com",
      "description": "A sample website",
      "created_at": "2025-07-02 12:00:00"
    }
  ]
}

POST /api/links

Create a new bookmark.

Authentication: Required

Parameters:

• title (required): Bookmark title
• url (required): URL to bookmark
• description (optional): Bookmark description
• is_public (optional): Make bookmark public (0 or 1, default: 0)

Example Request:

curl -X POST -H "Content-Type: application/json" \
  -d '{"username":"testuser","password":"testpass","title":"My Site","url":"https://mysite.com","description":"My personal website","is_public":1}' \
  https://4-0-4.io/api/links

GET /api/user/bookmarks

Get all bookmarks for the authenticated user (both public and private).

Authentication: Required

Example Request:

curl -u "testuser:testpass" https://4-0-4.io/api/user/bookmarks

DELETE /api/links/{id}

Delete a bookmark. Only the owner or admin can delete bookmarks.

Authentication: Required

Example Request:

curl -X DELETE -u "testuser:testpass" https://4-0-4.io/api/links/123

GET /api/files

Get list of all public files with metadata.

Authentication: None required

Example Request:

curl https://4-0-4.io/api/files

Example Response:

{
  "status": "success",
  "data": [
    {
      "slug": "abc123def456",
      "original_name": "example.txt",
      "size": 1024,
      "mime": "text/plain",
      "extension": "txt",
      "downloads": 5,
      "created_at": "2025-07-02 12:00:00",
      "expires_at": "2025-08-02 12:00:00",
      "download_url": "/file/abc123def456",
      "preview_url": "/preview/abc123def456"
    }
  ]
}

POST /api/files

Upload a new file.

Authentication: Required

Content-Type: multipart/form-data

Parameters:

• file (required): File to upload (max 100MB)
• password (optional): Password to encrypt the file
• expires_at (optional): Expiration date (YYYY-MM-DD HH:MM:SS)
• username (required): Your username
• password (required): Your password

Example Request:

curl -X POST -F "file=@example.txt" -F "username=testuser" -F "password=testpass" \
  https://4-0-4.io/api/files

Example Response:

{
  "status": "success",
  "message": "File uploaded",
  "data": {
    "slug": "abc123def456",
    "download_url": "/file/abc123def456",
    "preview_url": "/preview/abc123def456"
  }
}

GET /api/files/{slug}

Download a file by its slug. This will initiate the file download.

Authentication: None required (unless file is password protected)

Example Request:

curl -O https://4-0-4.io/api/files/abc123def456

GET /api/user/files

Get all files uploaded by the authenticated user.

Authentication: Required

Example Request:

curl -u "testuser:testpass" https://4-0-4.io/api/user/files

DELETE /api/files/{slug}

Delete a file. Only the owner or admin can delete files.

Authentication: Required

Example Request:

curl -X DELETE -u "testuser:testpass" https://4-0-4.io/api/files/abc123def456