concertmaster_api

Concertmaster is a classical music front-end for Spotify.

It's splitted in several projects. This one provides only the data API, used by our HTML/JS client. It's written in PHP and relies on a MySQL database. It consumes the Spotify API, therefore it can't be used by more than one client. So, if you plan to use the Concertmaster API in your app, you'll have to fork it beforehand.

Usage

It's a public RESTful API which returns data in JSON format. There is a wiki explaining all endpoints and data structures. No registration needed, but create/edit/delete endpoints require simple authentication.

How to build

Fork and clone this git repository to your webserver (for example, in the /var/www/ folder)
The Concertmaster API uses a shared Open Opus utilities library. Clone it in the same directory
Create a MySQL database (for example, app_concertmaster) and load its strucuture

mysql -u USER -p app_concertmaster < /var/www/concertmaster_api/sql/app_concertmaster.sql

Create an inc.php file from the example:

cd /var/www/concertmaster_api/lib/
cp inc-example.php inc.php
vim inc.php

Change variable values in the lib/inc.php accordingly to your webserver and Spotify API params (you can create a Spotify dev account here)

Cache and cache cleaning routines

The Concertmaster API can cache its results, saving server resources. In order to activate this feature you must:

Give ownership of the public directory to the web server group (e.g., www-data):

chgrp www-data /var/www/concertmaster_api/html -R

Set the environment variables for root:

vim /etc/environment

export BASEHTMLDIR="/var/www/concertmaster_api/html"

Update crontab for root (this will set the cache cleaning routines)

# m     h       dom     mon     dow     command
0       *       *       *       *       /var/www/concertmaster_api/cln/db.sh
*/30      *       *       *       *       /var/www/concertmaster_api/cln/user.sh

Domains

There is a single public directory in the project (/html) and it must have its own virtual host on your webserver. (For example, we host it at api.concertmaster.app.)

The API must be served with HTTPS. You can use a free Let's Encrypt-provided certificate, it's perfectly fine.

CORS Settings

Due to the Spotify API restriction, the Concertmaster API may accept requests from trusted domains only. We have chosen to implement this through CORS (cross-origin resource sharing). The following configuration works for Apache and must be placed inside your <virtualhost> directive:

SetEnvIf Origin ^(https?://(?:.+\.)?(concertmaster\.app|cmas\.me)(?::\d{1,5})?)$   CORS_ALLOW_ORIGIN=$1
Header append Access-Control-Allow-Origin  %{CORS_ALLOW_ORIGIN}e   env=CORS_ALLOW_ORIGIN
Header merge  Vary "Origin"

Change the domains above to the ones your app will use.

CORS in development environments

In order the make the API available to a local, dev application, edit the html/.htaccess file and change the domain for the one your dev environment will use.

Contributing with code

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Contributing with data

Concertmaster composers and works information come from Open Opus, a free, wiki-style, open source database of classical music metadata. You can review existing info or add new entries to the database - any help will be appreciated!

Contributing with money

Concertmaster is free to use but it runs on web servers that cost us money. You can help us by supporting us on Patreon - any amount is more than welcome!

License

GPL v3.0

bbreslauer / concertmaster_api