isso/README

Isso – Ich schrei sonst
=======================

You love static blog generators (especially [Acrylamid][1] \*cough\*) and the
only option to interact with the community is [Disqus][2]. There's nothing
wrong with it, but if you care about the privacy of your audience you should
better use a comment system that is under your control. This is, were Isso
comes into play.

[1]: https://github.com/posativ/acrylamid
[2]: http://disqus.com/

Current Status
--------------

- `nosetests specs/` ⇾ *Ran 17 tests in 0.491s*
- `(cd /path/static/html/ && isso)` ⇾ fire up your browser and visit `localhost:8080`

Features/Roadmap
----------------

- [x] lightweight backend (SQLite)
- [ ] transparent backend (JSON)
- [x] simple JSON API, hence comments are JavaScript-only
- [x] create comments and modify/delete within a time range as user
- [ ] Ping/Trackback support
- [w] simple admin interface
- [w] easy integration, similar to Disqus
- [ ] spam filtering using [http:bl][3]

[3]: https://www.projecthoneypot.org/

Development
-----------

*Note:* This project is proudly made with the Not Invented Here syndrome,
instead of `werkzeug` or `bottle` it uses about 100 lines to manage WSGI
and instead of JQuery it uses ender.js.

You'll need [2.6 ≤ python ≤ 2.7][4], [ender.js][5] and [YUI Compressor][6].
Then run:

    $ git clone https://github.com/posativ/isso.git && cd isso/
    $ make init
    $ make js
    $ isso

Then go to <http://localhost:8080/static/post.html> and write a comment :-)

[4]: http://python.org
[5]: http://ender.no.de/
[6]: http://developer.yahoo.com/yui/compressor/

Installation
------------

Still a TODO, but later it's simply `easy_install isso`.

Migration from Disqus
---------------------

Go to [disqus.com](https://disqus.com/) and export your "forum" as XML. If you
use Firefox and you get a 403, try a webkit browser, Disqus did something very
weird with that download link. Next:

    $ isso import /path/to/ur/dump.xml

That's it. Visit your admin page to see all threads. If it doesn't work for
you, please file in a bug report \*including\* your dump.

API
---

To fetch all comments for a path, run

    $ curl http://example.org/comment/foo-bar/

To write a comment, you have to POST a JSON dictionary with the following
key-value pairs. Text is mandatory otherwise you'll get a 400 Bad Request.
You'll also get a 400 when your JSON is invalid.

Let's say you want to comment on /foo-bar/

    $ curl http://example.org/comment/foo-bar/new -X POST -d \
        '{
            "text": "Lorem ipsum ...",
            "name": "Hans", "email": "foo@bla.org", "website": "http://blog/log/"
        }'

This will set a cookie, that expires in a few minutes (15 minutes per default).
This cookie allows you do modify or delete your comment. Don't try to modify
that cookie, it is cryptographically signed. If your cookie is outdated or
modified, you'll get a 403 Forbidden.

For each comment you'll post, you get an unique cookie. Let's try to remove
your comment:

    $ curl -X DELETE http://example.org/comment/foo-bar/1

If your comment has been referenced by another comment, your comment will be
cleared but not deleted to retain depending comments.

Alternatives
------------

- [Juvia](https://github.com/phusion/juvia) – Ruby on Rails
- [Tildehash.com](http://www.tildehash.com/?article=why-im-reinventing-disqus) – PHP
- [SO: Unobtrusive, self-hosted comments](http://stackoverflow.com/q/2053217)