Is there a way to access Prestashop's Web service using a client's login credentials instead of a key?

Question

Is there a way to access Prestashop's Web service using a client's login credentials instead of a key?

Currently, I am delving into Prestashop's development and experimenting with creating a third-party application using react.js (specifically React Native). My goal is to retrieve Json data from the Prestashop webservice. However, my main focus is on allowing customers to login with their individual accounts only, while also enabling CRUD functionalities.

In advance, thank you for your patience and attention.

Best regards,

Michel Diz

javascript web-services react-native prestashop prestashop-1.6

Answer 1

Answer №1

If you are having trouble accessing Prestashop backoffice through login, it may be because webservices are not enabled and a key has not been generated. I suggest changing your approach to logging in. Keep in mind that customer accounts and webservices are not directly linked, as webservices are primarily used to access stored data in Prestashop's backoffice rather than the frontoffice.

Do you need specific instructions on how to enable webservices and generate a key?

I hope this information is helpful to you.

Answer 2

If you are having trouble accessing Prestashop backoffice through login, it may be because webservices are not enabled and a key has not been generated. I suggest changing your approach to logging in. Keep in mind that customer accounts and webservices are not directly linked, as webservices are primarily used to access stored data in Prestashop's backoffice rather than the frontoffice.

Do you need specific instructions on how to enable webservices and generate a key?

I hope this information is helpful to you.

Answer 3

Answer №2

If you're still in need of a solution, there is actually a way.

ENSURE THAT THE LOGIN IS SECURE.

Given that access to all PrestaShop data is being granted, it's crucial to have a highly secure login system. By utilizing PHP, I was able to recreate it and believe that with some modifications, you can tailor it to meet your requirements. Consider this as a starting point.

In order to establish a login system using the PrestaShop webservice, you will require three key components:

1. Access to the customers table via the webservice 2. The COOKIE_KEY, as defined in app/config -> parameters.php: 'cookie_key' => '12321test'; 3. Proficiency in PHP The initial step involves obtaining the customers table from the webservice.

// code placeholder
require_once('./../PSWebServiceLibrary.php');

/**
 * Obtain information from PrestaShop
 */

$webService = new PrestaShopWebservice($url, $key, $debug);

$COOKIE_KEY = 'CookieKey';
$email = $_REQUEST['email'];
$password = $_REQUEST['password'];

$optUser = array(
    'resource' => 'customers',
    'filter[email]' => '[' . $email . ']',
    'display' => '[id,email,lastname,firstname,passwd]'
);

$resultUser = ($webService->get($optUser));

$json = json_encode($resultUser);

The second and most critical step is validating the user input.

// code placeholder

foreach ($resultUser->customers->customer as $info) {
    // Prestashop uses the cookie_key along with a salt key for password verification. Utilize the PHP function password_verify() to validate the password.
    $salt = substr($info->passwd, strrpos($info->passwd, ':') + 1, 2);
    $ZCpassword = md5($COOKIE_KEY . $password) . ':' . $salt;

    // Verify if the passwords match
    if (password_verify($password, $info->passwd) == true) {
        session_start();
        $response = array();
        $response['status'] = 'success';
        $response['message'] = "Login successful!";
        setcookie("userId", $info->id);
        header('Content-type: application/json');
        echo json_encode($response);
    } else {
        $response = array();
        $response['status'] = 'error';
        $response['message'] = 'Invalid password';
        header('Content-type: application/json');
        echo json_encode($response);
    }
}

This serves as a blueprint to illustrate how to create a functional example.

Trust this provides assistance!

Answer 4

If you're still in need of a solution, there is actually a way.

ENSURE THAT THE LOGIN IS SECURE.

Given that access to all PrestaShop data is being granted, it's crucial to have a highly secure login system. By utilizing PHP, I was able to recreate it and believe that with some modifications, you can tailor it to meet your requirements. Consider this as a starting point.

In order to establish a login system using the PrestaShop webservice, you will require three key components:

1. Access to the customers table via the webservice 2. The COOKIE_KEY, as defined in app/config -> parameters.php: 'cookie_key' => '12321test'; 3. Proficiency in PHP The initial step involves obtaining the customers table from the webservice.

// code placeholder
require_once('./../PSWebServiceLibrary.php');

/**
 * Obtain information from PrestaShop
 */

$webService = new PrestaShopWebservice($url, $key, $debug);

$COOKIE_KEY = 'CookieKey';
$email = $_REQUEST['email'];
$password = $_REQUEST['password'];

$optUser = array(
    'resource' => 'customers',
    'filter[email]' => '[' . $email . ']',
    'display' => '[id,email,lastname,firstname,passwd]'
);

$resultUser = ($webService->get($optUser));

$json = json_encode($resultUser);

The second and most critical step is validating the user input.

// code placeholder

foreach ($resultUser->customers->customer as $info) {
    // Prestashop uses the cookie_key along with a salt key for password verification. Utilize the PHP function password_verify() to validate the password.
    $salt = substr($info->passwd, strrpos($info->passwd, ':') + 1, 2);
    $ZCpassword = md5($COOKIE_KEY . $password) . ':' . $salt;

    // Verify if the passwords match
    if (password_verify($password, $info->passwd) == true) {
        session_start();
        $response = array();
        $response['status'] = 'success';
        $response['message'] = "Login successful!";
        setcookie("userId", $info->id);
        header('Content-type: application/json');
        echo json_encode($response);
    } else {
        $response = array();
        $response['status'] = 'error';
        $response['message'] = 'Invalid password';
        header('Content-type: application/json');
        echo json_encode($response);
    }
}

This serves as a blueprint to illustrate how to create a functional example.

Trust this provides assistance!

Answer 5

Answer №3

If you’re still on the hunt for this solution,

<?

if (isset($_GET["email"]) && isset($_GET["password"]) )
{
$email =  $_GET["email"];
$password = $_GET["password"];

$COOKIE_KEY = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';

$jsonurl = "https://<a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="702828282828282828282828282828282828282828301508111d001c155e131f1d">[email protected]</a>/api/customers?filter[email]=".$email."&display=[passwd]&output_format=JSON";
$json = file_get_contents($jsonurl);
$json_a = json_decode($json, true);

$loopone = $json_a['customers'];
$looptwo = $loopone[0];
$loopthree = $looptwo['passwd'];

$ZCpassword = md5($COOKIE_KEY . $password);

if (strcmp($loopthree, $ZCpassword) == 0) {
        echo "success";
    } else {
         echo "failure";
    }

}
else
{
    echo "Provide a valid url parameter";
}

?>

Answer 6

If you’re still on the hunt for this solution,

<?

if (isset($_GET["email"]) && isset($_GET["password"]) )
{
$email =  $_GET["email"];
$password = $_GET["password"];

$COOKIE_KEY = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';

$jsonurl = "https://<a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="702828282828282828282828282828282828282828301508111d001c155e131f1d">[email protected]</a>/api/customers?filter[email]=".$email."&display=[passwd]&output_format=JSON";
$json = file_get_contents($jsonurl);
$json_a = json_decode($json, true);

$loopone = $json_a['customers'];
$looptwo = $loopone[0];
$loopthree = $looptwo['passwd'];

$ZCpassword = md5($COOKIE_KEY . $password);

if (strcmp($loopthree, $ZCpassword) == 0) {
        echo "success";
    } else {
         echo "failure";
    }

}
else
{
    echo "Provide a valid url parameter";
}

?>

Is there a way to access Prestashop's Web service using a client's login credentials instead of a key?

Answer №1

Answer №2

Answer №3

Similar questions

Creating a TypeScript generic type for the "pick" function to define the types of values in the resulting object

Can AJAX function properly when the server-side code is hosted on a separate domain?

A simple way to deactivate a React component (or the onClick event itself) using the onClick event

Encountering unexpected behavior with the .data() method

How to add vertical bars within ng-repeat in AngularJS

Are there alternative methods, aside from using a computed property, that can be utilized to store a Vue route parameter in a way where

What is the most effective way to manage and respond to multiple events while also organizing the overall structure of

The web server is serving an HTML file instead of the expected JSON response

Searching through text in Node JS using Mongoose for Full-Text queries

Using a three.js texture with a JSON object

Sorting and dividing an Array using Angular

What is the issue with the character set?

Trouble with Next.js App Router OG Image not appearing after deployment

Monitor and adjust variables simultaneously using AngularJS

Switching Image Values in JavaScript: A Quick Guide

The compatibility between Node JS and Vue JS front-end seems to be glitchy and

Show only half of the Google Charts

What is the best way to navigate a dynamic table in Vue.js?

TypeScript multi-dimensional array type declaration

Would it be beneficial to upload and download an image using the same ajax call?