isso/README

Isso – Ich schrei sonst
=======================

You love static blog generators (especially [Acrylamid][1] \*cough\*) and the only
option to interact with the community is [Disqus][2]. There's nothing wrong with
it, but if you care about the privacy of your audience you should better use
a comment system that is under your control. This is, were Isso comes into play.

[1]: https://github.com/posativ/acrylamid
[2]: http://disqus.com/

Current Status
--------------

- `nosetests specs/` ⇾ *Ran 17 tests in 0.491s*
- `(cd /path/static/html/ && isso)` ⇾ fire up your browser and visit your site except for `/`

Features/Roadmap
----------------

- [x] lightweight backend (SQLite)
- [ ] transparent backend (JSON)
- [x] simple JSON API, hence comments are JavaScript-only
- [x] create comments and modify/delete within a time range as user
- [ ] Ping/Trackback support
- [w] simple admin interface
- [w] easy integration, similar to Disqus
- [ ] spam filtering using [http:bl](https://www.projecthoneypot.org/)

Development
-----------

*Note:* This project is proudly made with the Not Invented Here syndrome, instead of `werkzeug`
or `bottle` it uses about 100 lines to manage WSGI and instead of JQuery it uses ender.js.

You'll need [2.6 ≤ python ≤ 2.7](http://python.org), [ender.js](http://ender.no.de/) and
[YUI Compressor](http://developer.yahoo.com/yui/compressor/). Then run:

    $ git clone https://github.com/posativ/isso.git && cd isso/
    $ make init
    $ make js
    $ isso

Then go to <http://localhost:8080/static/post.html> and write a comment :-)

Installation
------------

Still a TODO, but later it's simply `easy_install isso`.

Migration from Disqus
---------------------

Go to [disqus.com](https://disqus.com/) and export your "forum" as XML. If you
use Firefox and you get a 403, try a webkit browser, Disqus did something very
weird with that download link. Next:

    $ isso import /path/to/ur/dump.xml

That's it. Visit your admin page to see all threads. If it doesn't work for you,
please file in a bug report \*including\* your dump.

API
---

To fetch all comments for a path, run

    $ curl http://example.org/comment/foo-bar/

To write a comment, you have to POST a JSON dictionary with the following key-value
pairs. Text is mandatory otherwise you'll get a 400 Bad Request. You'll also get
a 400 when your JSON is invalid.

Let's say you want to comment on /foo-bar/

    $ curl http://example.org/comment/foo-bar/new -X POST -d \
        '{
            "text": "Lorem ipsum ...",
            "name": "Hans", "email": "foo@bla.org", "website": "http://blog/log/"
        }'

This will set a cookie, that expires in a few minutes (15 minutes per default). This
cookie allows you do modify or delete your comment. Don't try to modify that cookie,
it is cryptographically signed. If your cookie is outdated or modified, you'll get
a 403 Forbidden.

For each comment you'll post, you get an unique cookie. Let's try to remove your comment:

    $ curl -X DELETE http://example.org/comment/foo-bar/1

If your comment has been referenced by another comment, your comment will be cleared but
not deleted to retain depending comments.

Alternatives
------------

- [Juvia](https://github.com/phusion/juvia) – Ruby on Rails
- [Tildehash.com](http://www.tildehash.com/?article=why-im-reinventing-disqus) – PHP
- [SO: Unobtrusive, self-hosted comments](http://stackoverflow.com/q/2053217)