[Vtigercrm-developers] vTiger CustomerPortal API

Martin Allen martin.allen at clystnet.com
Wed Sep 16 14:36:41 GMT 2020


We have previously added new WebService operations that allow you to verify
a Contacts username and password, but had to do this as a completely custom
solution to meet security requirements as there was no existing way of
doing it.

Martin Allen


*01392 248692 - Main Office01392 690659 - Direct Line*

*[image: signature2]*

Have you visited our website recently? http://www.clystnet.com


The information in this email is confidential If you are not the intended
recipient, you must not read or use that information. This email and any
attachments are believed to be virus free however no responsibility is
accepted by Clystnet for any loss or damage arising in any way from receipt
or use thereof. Clystnet Ltd (company reg number 7164503) is based at
Silverdown Park, Fair Oak Close, Clyst Honiton, EX5 2UX


On Wed, 16 Sep 2020 at 14:39, Chris Landa <stylesuxx at gmail.com> wrote:

> Am Mi., 16. Sept. 2020 um 15:29 Uhr schrieb Alan Lord <
> alanslists at gmail.com>:
>
>> On 16/09/2020 14:07, Chris Landa wrote:
>> > It seems "wrong" to me having to validate the login details against the
>> > customerportal. I thought there might be a way via API that I am
>> > missing. I am aware that those passwords are encrypted. I would encrypt
>> > the given password and compare against what is already in the database
>> -
>> > basically the same way it is done on the customerportal login page
>> anyway.
>>
>> Ahh, I see.
>>
>> As far as I am aware all of the existing webservices APIs were only ever
>> designed for vtiger _users_; not portal users, i.e. Contacts.
>>
>
> This is also how I understand it - thank you for confirming
>
>
>> Take a look at the files api.php and apis/AbstractApi.php in the vtiger
>> CustomerPortal module for the way the authentication process is handled.
>>
>> Looking at that code I think you could probably poke that endpoint
>> directly - rather than having to go via the Customer Portal application
>> itself.
>>
>> Alternatively I suppose you could create a new webservices endpoint (see
>> the table vtiger_ws_operation) for validation/logging in of Portal users?
>>
>>
>> Al
>
>
> Thanks for your input - right now I have the "wrong feeling" solution
> implemented since this is just a POC project.
> If we move forward, I will look into a new webservice endpoint as it seems
> to be the cleanest solution to me.
>
> Thanks again for your quick reply.
>
> Chris
> _______________________________________________
> http://www.vtiger.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20200916/0a6a43e7/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 10550 bytes
Desc: not available
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20200916/0a6a43e7/attachment.png>


More information about the vtigercrm-developers mailing list