codebird-php
Easy access to the Twitter REST API, Direct Messages API, Account Activity API, TON (Object Nest) API and Twitter Ads API — all from one PHP library., (*1)
Copyright (C) 2010-2018 Jublo Limited support@jublo.net, (*2)
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version., (*3)
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details., (*4)
You should have received a copy of the GNU General Public License
along with this program. If not, see http://www.gnu.org/licenses/., (*5)
, (*6)
Requirements
- PHP 7.1.0 or higher
- OpenSSL extension
Summary
Use Codebird to connect to the Twitter REST API, Streaming API, Collections API, TON (Object Nest) API
and Twitter Ads API from your PHP code — all using just one library.
Codebird supports full 3-way OAuth as well as application-only auth., (*7)
Authentication
To authenticate your API requests on behalf of a certain Twitter user
(following OAuth 1.0a), take a look at these steps:, (*8)
require_once ('codebird.php');
\Codebird\Codebird::setConsumerKey('YOURKEY', 'YOURSECRET'); // static, see README
$cb = \Codebird\Codebird::getInstance();
You may either set the OAuth token and secret, if you already have them:, (*9)
$cb->setToken('YOURTOKEN', 'YOURTOKENSECRET');
Or you authenticate, like this:, (*10)
session_start();
if (! isset($_SESSION['oauth_token'])) {
// get the request token
$reply = $cb->oauth_requestToken([
'oauth_callback' => 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']
]);
// store the token
$cb->setToken($reply->oauth_token, $reply->oauth_token_secret);
$_SESSION['oauth_token'] = $reply->oauth_token;
$_SESSION['oauth_token_secret'] = $reply->oauth_token_secret;
$_SESSION['oauth_verify'] = true;
// redirect to auth website
$auth_url = $cb->oauth_authorize();
header('Location: ' . $auth_url);
die();
} elseif (isset($_GET['oauth_verifier']) && isset($_SESSION['oauth_verify'])) {
// verify the token
$cb->setToken($_SESSION['oauth_token'], $_SESSION['oauth_token_secret']);
unset($_SESSION['oauth_verify']);
// get the access token
$reply = $cb->oauth_accessToken([
'oauth_verifier' => $_GET['oauth_verifier']
]);
// store the token (which is different from the request token!)
$_SESSION['oauth_token'] = $reply->oauth_token;
$_SESSION['oauth_token_secret'] = $reply->oauth_token_secret;
// send to same URL, without oauth GET parameters
header('Location: ' . basename(__FILE__));
die();
}
// assign access token on each page load
$cb->setToken($_SESSION['oauth_token'], $_SESSION['oauth_token_secret']);
Logging out
In case you want to log out the current user (to log in a different user without
creating a new Codebird object), just call the logout()
method., (*11)
$cb->logout();
Application-only auth
Some API methods also support authenticating on a per-application level.
This is useful for getting data that are not directly related to a specific
Twitter user, but generic to the Twitter ecosystem (such as search/tweets
)., (*12)
To obtain an app-only bearer token, call the appropriate API:, (*13)
$reply = $cb->oauth2_token();
$bearer_token = $reply->access_token;
I strongly recommend that you store the obtained bearer token in your database.
There is no need to re-obtain the token with each page load, as it becomes invalid
only when you call the oauth2/invalidate_token
method., (*14)
If you already have your token, tell Codebird to use it:, (*15)
\Codebird\Codebird::setBearerToken('YOURBEARERTOKEN');
In this case, you don't need to set the consumer key and secret.
For sending an API request with app-only auth, see the ‘Usage examples’ section., (*16)
A word on your callback URL
Twitter is very restrictive about which URLs may be used for your callback URL.
For example, even the presence of the ‘www’ subdomain must match with the domain
that you specified in the settings of your app at https://developer.twitter.com/en/apps., (*17)
Mapping API methods to Codebird function calls
As you can see from the last example, there is a general way how Twitter’s API methods
map to Codebird function calls. The general rules are:, (*18)
-
For each slash in a Twitter API method, use an underscore in the Codebird function., (*19)
Example: statuses/update
maps to Codebird::statuses_update()
., (*20)
-
For each underscore in a Twitter API method, use camelCase in the Codebird function., (*21)
Example: statuses/home_timeline
maps to Codebird::statuses_homeTimeline()
., (*22)
-
For each parameter template in method, use UPPERCASE in the Codebird function.
Also don’t forget to include the parameter in your parameter list., (*23)
Examples:, (*24)
-
statuses/show/:id
maps to Codebird::statuses_show_ID('id=12345')
.
-
users/profile_image/:screen_name
maps to
Codebird::users_profileImage_SCREEN_NAME('screen_name=jublonet')
.
Usage examples
When you have an access token, calling the API is simple:, (*25)
$cb->setToken($_SESSION['oauth_token'], $_SESSION['oauth_token_secret']); // see above
$reply = (array) $cb->statuses_homeTimeline();
print_r($reply);
Tweeting is as easy as this:, (*26)
$reply = $cb->statuses_update('status=Whohoo, I just Tweeted!');
:warning: Make sure to urlencode any parameter values that contain
query-reserved characters, like Tweeting the &
sign:, (*27)
$reply = $cb->statuses_update('status=' . urlencode('Fish & chips'));
// will result in this:
$reply = $cb->statuses_update('status=Fish+%26+chips');
In most cases, giving all parameters in an array is easier,
because no encoding is needed:, (*28)
$params = [
'status' => 'Fish & chips'
];
$reply = $cb->statuses_update($params);
$params = [
'status' => 'I love London',
'lat' => 51.5033,
'long' => 0.1197
];
$reply = $cb->statuses_update($params);
$params = [
'screen_name' => 'jublonet'
];
$reply = $cb->users_show($params);
This is the resulting Tweet
sent with the code above., (*29)
Requests with app-only auth
To send API requests without an access token for a user (app-only auth),
add a second parameter to your method call, like this:, (*30)
$reply = $cb->search_tweets('q=Twitter', true);
Bear in mind that not all API methods support application-only auth., (*31)
HTTP methods (GET, POST, DELETE etc.)
Never care about which HTTP method (verb) to use when calling a Twitter API.
Codebird is intelligent enough to find out on its own., (*32)
Response codes
The HTTP response code that the API gave is included in any return values.
You can find it within the return object’s httpstatus
property., (*33)
Dealing with rate-limits
Basically, Codebird leaves it up to you to handle Twitter’s rate limit.
The library returns the response HTTP status code, so you can detect rate limits., (*34)
I suggest you to check if the $reply->httpstatus
property is 400
and check with the Twitter API to find out if you are currently being
rate-limited.
See the Rate Limiting FAQ
for more information., (*35)
Unless your return format is JSON, you will receive rate-limiting details
in the returned data’s $reply->rate
property,
if the Twitter API responds with rate-limiting HTTP headers., (*36)
The default return format for API calls is a PHP object.
For API methods returning multiple data (like statuses/home_timeline
),
you should cast the reply to array, like this:, (*37)
$reply = $cb->statuses_homeTimeline();
$data = (array) $reply;
Upon your choice, you may also get PHP arrays directly:, (*38)
$cb->setReturnFormat(CODEBIRD_RETURNFORMAT_ARRAY);
The Twitter API natively responds to API calls in JSON (JS Object Notation).
To get a JSON string, set the corresponding return format:, (*39)
$cb->setReturnFormat(CODEBIRD_RETURNFORMAT_JSON);
Uploading images and videos
Twitter will accept the following media types, all of which are supported by Codebird:
- PNG
- JPEG
- BMP
- WebP
- GIF
- Animated GIF
- Video, (*40)
Tweet media can be uploaded in a 2-step process:, (*41)
First you send each media to Twitter. For images, it works like this:, (*42)
// these files to upload. You can also just upload 1 image!
$media_files = [
'bird1.jpg', 'bird2.jpg', 'bird3.jpg'
];
// will hold the uploaded IDs
$media_ids = [];
foreach ($media_files as $file) {
// upload all media files
$reply = $cb->media_upload([
'media' => $file
]);
// and collect their IDs
$media_ids[] = $reply->media_id_string;
}
Uploading videos requires you to send the data in chunks. See the next section on this., (*43)
Second, you attach the collected media ids for all images to your call
to statuses/update
, like this:, (*44)
// convert media ids to string list
$media_ids = implode(',', $media_ids);
// send Tweet with these medias
$reply = $cb->statuses_update([
'status' => 'These are some of my relatives.',
'media_ids' => $media_ids
]);
print_r($reply);
Here is a sample Tweet
sent with the code above., (*45)
More documentation for uploading media is available on the Twitter Developer site., (*46)
Remote files
Remote files received from http
and https
servers are supported, too:, (*47)
$reply = $cb->media_upload(array(
'media' => 'http://www.bing.com/az/hprichbg/rb/BilbaoGuggenheim_EN-US11232447099_1366x768.jpg'
));
:warning: URLs containing Unicode characters should be normalised. A sample normalisation function can be found at http://stackoverflow.com/a/6059053/1816603, (*48)
To circumvent download issues when remote servers are slow to respond,
you may customise the remote download timeout, like this:, (*49)
$cb->setRemoteDownloadTimeout(10000); // milliseconds
Video files
Uploading videos to Twitter (≤ 15MB, MP4) requires you to send them in chunks.
You need to perform at least 3 calls to obtain your media_id
for the video:, (*50)
- Send an
INIT
event to get a media_id
draft.
- Upload your chunks with
APPEND
events, each one up to 5MB in size.
- Send a
FINALIZE
event to convert the draft to a ready-to-Tweet media_id
.
- Post your Tweet with video attached.
Here’s a sample for video uploads:, (*51)
$file = 'demo-video.mp4';
$size_bytes = filesize($file);
$fp = fopen($file, 'r');
// INIT the upload
$reply = $cb->media_upload([
'command' => 'INIT',
'media_type' => 'video/mp4',
'total_bytes' => $size_bytes
]);
$media_id = $reply->media_id_string;
// APPEND data to the upload
$segment_id = 0;
while (! feof($fp)) {
$chunk = fread($fp, 1048576); // 1MB per chunk for this sample
$reply = $cb->media_upload([
'command' => 'APPEND',
'media_id' => $media_id,
'segment_index' => $segment_id,
'media' => $chunk
]);
$segment_id++;
}
fclose($fp);
// FINALIZE the upload
$reply = $cb->media_upload([
'command' => 'FINALIZE',
'media_id' => $media_id
]);
var_dump($reply);
if ($reply->httpstatus < 200 || $reply->httpstatus > 299) {
die();
}
// if you have a field `processing_info` in the reply,
// use the STATUS command to check if the video has finished processing.
// Now use the media_id in a Tweet
$reply = $cb->statuses_update([
'status' => 'Twitter now accepts video uploads.',
'media_ids' => $media_id
]);
Find more information about accepted media formats in the Twitter Developer docs., (*52)
:warning: When uploading a video in multiple chunks, you may run into an error The validation of media ids failed.
even though the media_id
is correct. This is known. Please check back in the Twitter community forums., (*53)
The Streaming APIs give developers low latency access to Twitter’s global stream of
Tweet data. A proper implementation of a streaming client will be pushed messages
indicating Tweets and other events have occurred, without any of the overhead
associated with polling a REST endpoint., (*54)
To consume one of the available Twitter streams, follow these two steps:, (*55)
-
Set up a callback function that gets called for every new streaming message that arrives., (*56)
Codebird also calls this function once per second, to allow you to work on any due tasks, and to give you the chance to cancel the stream even if no new messages appear., (*57)
-
After creating the callback, tell Codebird about it using a callable. Then start consuming the stream., (*58)
// First, create a callback function:
function some_callback($message)
{
// gets called for every new streamed message
// gets called with $message = NULL once per second
if ($message !== null) {
print_r($message);
flush();
}
// return false to continue streaming
// return true to close the stream
// close streaming after 1 minute for this simple sample
// don't rely on globals in your code!
if (time() - $GLOBALS['time_start'] >= 60) {
return true;
}
return false;
}
// set the streaming callback in Codebird
$cb->setStreamingCallback('some_callback');
// any callable is accepted:
// $cb->setStreamingCallback(['MyClass', 'some_callback']);
// for canceling, see callback function body
// not considered good practice in real world!
$GLOBALS['time_start'] = time();
// Second, start consuming the stream:
$reply = $cb->statuses_filter();
// See the *Mapping API methods to Codebird function calls* section for method names.
// $reply = $cb->statuses_filter('track=Windows');
You should be able to set a timeout for the streaming API using setTimeout
.
In addition, your callback will receive empty messages if no events occur,
and you should make your function return true;
in order to cancel the stream., (*59)
Find more information on the Streaming API
in the developer documentation website., (*60)
Twitter Collections, Direct Messages and Account Activity APIs
Collections are a type of timeline that you control and can be hand curated
and/or programmed using an API., (*61)
Pay close attention to the differences in how collections are presented —
often they will be decomposed, efficient objects with information about users,
Tweets, and timelines grouped, simplified, and stripped of unnecessary repetition., (*62)
Never care about the OAuth signing specialities and the JSON POST body
for POST and PUT calls to these special APIs. Codebird takes off the work for you
and will always send the correct Content-Type automatically., (*63)
Find out more about the Collections API in the Twitter API docs.
More information on the Direct Messages API and the Account Activity API is available there as well., (*64)
Here’s a sample for adding a Tweet using the Collections API:, (*65)
$reply = $cb->collections_entries_curate([
'id' => 'custom-672852634622144512',
'changes' => [
['op' => 'add', 'tweet_id' => '672727928262828032']
]
]);
var_dump($reply);
The TON (Twitter Object Nest) API allows implementers to upload media and various assets to Twitter.
The TON API supports non-resumable and resumable upload methods based on the size of the file.
For files less than 64MB, non-resumable may be used. For files greater than or equal to 64MB,
resumable must be used. Resumable uploads require chunk sizes of less than 64MB., (*66)
For accessing the TON API, please adapt the following code samples for uploading:, (*67)
Single-chunk upload
// single-chunk upload
$reply = $cb->ton_bucket_BUCKET([
'bucket' => 'ta_partner',
'Content-Type' => 'image/jpeg',
'media' => $file
]);
var_dump($reply);
// use the Location header now...
echo $reply->Location;
As you see from that sample, Codebird rewrites the special TON API headers into the reply,
so you can easily access them. This also applies to the X-TON-Min-Chunk-Size
and
X-Ton-Max-Chunk-Size
for chunked uploads:, (*68)
Multi-chunk upload
// multi-chunk upload
$file = 'demo-video.mp4';
$size_bytes = filesize($file);
$fp = fopen($file, 'r');
// INIT the upload
$reply = $cb->__call(
'ton/bucket/BUCKET?resumable=true',
[[ // note the double square braces when using __call
'bucket' => 'ta_partner',
'Content-Type' => 'video/mp4',
'X-Ton-Content-Type' => 'video/mp4',
'X-Ton-Content-Length' => $size_bytes
]]
);
$target = $reply->Location;
// something like: '/1.1/ton/bucket/ta_partner/SzFxGfAg_Zj.mp4?resumable=true&resumeId=28401873'
$match = [];
// match the location parts
preg_match('/ton\/bucket\/.+\/(.+)\?resumable=true&resumeId=(\d+)/', $target, $match);
list ($target, $file, $resumeId) = $match;
// APPEND data to the upload
$segment_id = 0;
while (! feof($fp)) {
$chunk = fread($fp, 1048576); // 1MB per chunk for this sample
// special way to call Codebird for the upload chunks
$reply = $cb->__call(
'ton/bucket/BUCKET/FILE?resumable=true&resumeId=RESUMEID',
[[ // note the double square braces when using __call
'bucket' => 'ta_partner',
'file' => $file, // you get real filename from INIT, see above
'Content-Type' => 'image/jpeg',
'Content-Range' => 'bytes '
. ($segment_id * 1048576) . '-' . strlen($chunk) . '/' . $size_bytes,
'resumeId' => $resumeId,
'media' => $chunk
]]
);
$segment_id++;
}
fclose($fp);
The Twitter Ads API allows partners to
integrate with the Twitter advertising platform in their own advertising solutions.
Selected partners have the ability to create custom tools to manage and execute
Twitter Ad campaigns., (*69)
When accessing the Ads API or Ads Sandbox API, access it by prefixing your call
with ads_
. Watch out for the usual replacements for in-url parameters,
particularly :account_id
., (*70)
Tip: For accessing the Ads Sandbox API, use the ads_sandbox_
prefix,
like shown further down., (*71)
Here is an example for calling the Twitter Ads API:, (*72)
$reply = $cb->ads_accounts_ACCOUNT_ID_cards_appDownload([
'account_id' => '123456789',
'name' => 'Test',
'app_country_code' => 'DE'
]);
Multiple-method API calls
In the Twitter Ads API, there are multiple methods that can be reached by
HTTP GET
, POST
, PUT
and/or DELETE
. While Codebird does its best to guess
which HTTP verb you’ll want to use, it’s the safest bet to give a hint yourself,
like this:, (*73)
$reply = $cb->ads_sandbox_accounts_ACCOUNT_ID_cards_imageConversation_CARD_ID([
'httpmethod' => 'DELETE',
'account_id' => '123456789',
'card_id' => '2468013579'
]);
Codebird will remove the httpmethod
parameter from the parameters list automatically,
and set the corresponding HTTP verb., (*74)
How Do I…?
…use multiple Codebird instances?
By default, Codebird works with just one instance. This programming paradigma is
called a singleton., (*75)
Getting the main Codebird object is done like this:, (*76)
$cb = \Codebird\Codebird::getInstance();
If you need to run requests to the Twitter API for multiple users at once,
Codebird supports this as well. Instead of getting the instance like shown above,
create a new object:, (*77)
$cb1 = new \Codebird\Codebird;
$cb2 = new \Codebird\Codebird;
Please note that your OAuth consumer key and secret is shared within
multiple Codebird instances, while the OAuth request and access tokens with their
secrets are not shared., (*78)
…access a user’s profile image?
First retrieve the user object using, (*79)
$reply = $cb->users_show("screen_name=$username");
, (*80)
with $username
being the username of the account you wish to retrieve the profile image from., (*81)
Then get the value from the index profile_image_url
or profile_image_url_https
of the user object previously retrieved., (*82)
For example:, (*83)
$reply['profile_image_url']
will then return the profile image url without https., (*84)
…get user ID, screen name and more details about the current user?
When the user returns from the authentication screen, you need to trade
the obtained request token for an access token, using the OAuth verifier.
As discussed in the section ‘Usage example,’ you use a call to
oauth/access_token
to do that., (*85)
The API reply to this method call tells you details about the user that just logged in.
These details contain the user ID and the screen name., (*86)
Take a look at the returned data as follows:, (*87)
stdClass Object
(
[oauth_token] => 14648265-rPn8EJwfB**********************
[oauth_token_secret] => agvf3L3**************************
[user_id] => 14648265
[screen_name] => jublonet
[httpstatus] => 200
)
If you need to get more details, such as the user’s latest Tweet,
you should fetch the complete User Entity. The simplest way to get the
user entity of the currently authenticated user is to use the
account/verify_credentials
API method. In Codebird, it works like this:, (*88)
$reply = $cb->account_verifyCredentials();
print_r($reply);
I suggest to cache the User Entity after obtaining it, as the
account/verify_credentials
method is rate-limited by 15 calls per 15 minutes., (*89)
…walk through cursored results?
The Twitter REST API utilizes a technique called ‘cursoring’ to paginate
large result sets. Cursoring separates results into pages of no more than
5000 results at a time, and provides a means to move backwards and
forwards through these pages., (*90)
Here is how you can walk through cursored results with Codebird., (*91)
- Get the first result set of a cursored method:
$result1 = $cb->followers_list();
- To navigate forth, take the
next_cursor_str
:
$nextCursor = $result1->next_cursor_str;
- If
$nextCursor
is not 0, use this cursor to request the next result page:
if ($nextCursor > 0) {
$result2 = $cb->followers_list('cursor=' . $nextCursor);
}
To navigate back instead of forth, use the field $resultX->previous_cursor_str
instead of next_cursor_str
., (*92)
It might make sense to use the cursors in a loop. Watch out, though,
not to send more than the allowed number of requests to followers/list
per rate-limit timeframe, or else you will hit your rate-limit., (*93)
…use xAuth with Codebird?
Codebird supports xAuth just like every other authentication used at Twitter.
Remember that your application needs to be whitelisted to be able to use xAuth., (*94)
Here’s an example:, (*95)
$reply = $cb->oauth_accessToken([
'x_auth_username' => 'username',
'x_auth_password' => '4h3_p4$$w0rd',
'x_auth_mode' => 'client_auth'
]);
Are you getting a strange error message? If the user is enrolled in
login verification, the server will return a HTTP 401 error with a custom body.
If you are using the send_error_codes
parameter, you will receive the
following error message in the response body:, (*96)
<?xml version="1.0" encoding="UTF-8"?>
<errors>
<error code="231">User must verify login</error>
</errors>
Otherwise, the response body will contain a plaintext response:, (*97)
User must verify login
When this error occurs, advise the user to
generate a temporary password
on twitter.com and use that to complete signing in to the application., (*98)
…know what cacert.pem is for?
Connections to the Twitter API are done over a secured SSL connection.
Codebird-php checks if the Twitter API server has a valid SSL certificate.
Valid certificates have a correct signature-chain.
The cacert.pem file contains a list of all public certificates for root
certificate authorities. You can find more information about this file
at http://curl.haxx.se/docs/caextract.html., (*99)
For connecting to Twitter, Codebird uses the cURL library, if available.
You can specify both the connection timeout and the request timeout,
in milliseconds:, (*100)
$cb->setConnectionTimeout(2000);
$cb->setTimeout(5000);
If you don't specify the timeout, codebird uses these values:, (*101)
- connection time = 3000 ms = 3 s
- timeout = 10000 ms = 10 s
…disable cURL?
Codebird automatically detects whether you have the PHP cURL extension enabled.
If not, the library will try to connect to Twitter via socket.
For this to work, the PHP setting allow_url_fopen
must be enabled., (*102)
You may also manually disable cURL. Use the following call:, (*103)
$cb->setUseCurl(false);
…use a proxy?
Codebird allows proxy support for both cURL handles and sockets., (*104)
To activate proxy mode, use the following call:, (*105)
$cb->setProxy('<host>', '<port>');
You may also use an authenticated proxy. Use the following call:, (*106)
$cb->setProxy('<host>', '<port>');
$cb->setProxyAuthentication('<username>:<password>');
By default, a HTTP proxy is assumed. To use a different proxy type,
use the corresponding CURLPROXY_*
constants, like this:, (*107)
$cb->setProxy('<host>', '<port>', CURLPROXY_SOCKS5);
Quoting a Tweet is different from a Retweet because you may add your own text.
The original Tweet will appear below your quote.
To quote a Tweet, add a link to the original Tweet to your quote, like in this sample:, (*108)
$original_tweet = [
'id_str' => '684483801687392256',
'user' => [
'screen_name' => 'LarryMcTweet'
]
];
$original_tweet = (object) $original_tweet; // sample, get real Tweet from API
$id = $original_tweet->id_str; // use the `id_str` field because of long numbers
$screen_name = $original_tweet->user->screen_name;
// looks like this: https://twitter.com/LarryMcTweet/status/684483801687392256
$url = "https://twitter.com/$screen_name/status/$id";
$text = 'I’d like to quote a Tweet.'; // maximum length = 140 minus 24 (link length) minus 1 space
$reply = $cb->statuses_update([
'status' => "$text $url"
]);