Android purple login (authentication) using SOAP API

Question

i am facing a problem while i try to log in (authentication). I cannot find the correct way to log in using my email and password. therefore, can you suggest me how I can do authentication or login in the magento store using the SOAP API. I tried this code as below.

env.dotNet = false; env.xsd = SoapSerializationEnvelope.XSD; env.enc = SoapSerializationEnvelope.ENC; SoapObject request = new SoapObject(NAMESPACE, "login"); request.addProperty("username", "xyz"); request.addProperty("apiKey", "xyz"); env.setOutputSoapObject(request); HttpTransportSE androidHttpTransport = new HttpTransportSE(URL); androidHttpTransport.debug = true; androidHttpTransport.call("", env); Object result = env.getResponse(); Log.d("sessionId", result.toString()); // making call to get list of customers String sessionId = result.toString(); request = new SoapObject(NAMESPACE, "customerCustomerInfo"); request.addProperty("sessionId", sessionId); request.addProperty("customerId", "2032"); request.addProperty("email", " [e-mail] "); request.addProperty("password", "password"); env.setOutputSoapObject(request); androidHttpTransport.call(SOAP_ACTION, env); androidHttpTransport.debug = true; result = env.getResponse(); Log.d("Customer List", result.toString()); 

}

but this does not help me if anyone has a solution to my question.

Thanks....

Answer 1

There is no direct login opportunity for the magento user. The password you retrieve from the API is hash_password, and you cannot verify that the password is equal. But you can use the method described below to enter magento.

• Create an external php file and log in to magento.

  require_once ('../magentosite/application/Mage.php');// Path to Magento Umask (0); Mage :: application ();

  $ id = 1;

  try {$ result = Mage :: getModel ("client / client") → setWebsiteId ($ id) → authenticate ($ email, $ password); } catch (Exception $ e) {$ result = false; }

• Send username and password from android to this php page using JSON and get "result".

• if the result is true, the username and password exist in the database.

Answer 2

You can actually check / log in using SOAP, you just need to expand it a bit. In the /code/core/Mage/Customer/Model/Customer/Api.php application add a new function

 public function login($email, $password){ /** @var $session Mage_Customer_Model_Session */ $session = Mage::getSingleton( 'customer/session' ); Mage::app()->getStore()->setWebsiteId(1); try { $session->login( $email, $password ); $customer = $session->getCustomer(); return json_encode(array('status' => 'OK', 'userData' => $this->info($customer->getId()))); } catch( Exception $e ) { return json_encode(array('status' => 'error', 'message' => $e->getMessage())); } } 

In the application /code/core/Mage/Customer/etc/api.xml

 <config> <api> <resources> <customer translate="title" module="customer"> <methods> ... <login translate="title" module="customer"> <title>Login customer</title> <acl>customer/login</acl> </login> 

also at the end

  <acl> <resources> <customer translate="title" module="customer"> ... <login translate="title" module="customer"> <title>Login</title> </login> 

And here you can check your login function

 <?php $host = "http://youmagentohost/index.php"; $client = new SoapClient($host."/api/soap/?wsdl"); //soap handle $apiuser= "apiuser"; //webservice user login $apikey = "apikey"; //webservice user pass $action = "customer.login"; try { $sess_id= $client->login($apiuser, $apikey); $params = array('email'=>' [e-mail] ', 'password'=>'password'); print_r($client->call($sess_id, $action, $params)); } catch (Exception $e) { //while an error has occured echo "==> Error: ".$e->getMessage(); exit(); } ?> 

This is a bad decision, but better than nothing. Do not forget to rewrite all the main files;)

Answer 3

Actually you can check / log in using SOAP in app / code / core / local / Envato / Masterapi / etc / api.xml

 <?xml version="1.0"?> <config> <api> <resources> <masterapi_loginmodel translate="title" module="masterapi"> <model>masterapi/loginmodel_api</model> <title>Demo Custommoduleapi API</title> <acl>masterapi/loginmodel</acl> <methods> <!-- <list translate="title" module="masterapi"> <title>List of masterapi</title> <method>clogin</method> </list> --> <customerlogin translate="title" module="masterapi"> <title>List of masterapi</title> </customerlogin> </methods> </masterapi_loginmodel> </resources> <resources_alias> <loginmodel>masterapi_loginmodel</loginmodel> </resources_alias> <v2> <resources_function_prefix> <loginmodel>masterapiLoginmodel</loginmodel> </resources_function_prefix> </v2> <acl> <resources> <masterapi translate="title" module="masterapi"> <title>Loginmodel</title> <sort_order>5</sort_order> <loginmodel translate="title" module="masterapi"> <title>loginmodel data</title> </loginmodel> </masterapi> </resources> </acl> </api> </config> 

In app / code / core / local / Envato / Masterapi / etc / config.xml

  <?xml version="1.0"?> <config> <modules> <Mycustom_Masterapi> <version>1.0</version> </Mycustom_Masterapi> </modules> <global> <models> <masterapi> <class>Mycustom_Masterapi_Model</class> </masterapi> </models> <helpers> <masterapi> <class>Mycustom_Masterapi_Helper</class> </masterapi> </helpers> </global> </config> 

In app / code / core / local / Envato / Masterapi / etc / wsdl.xml

 <?xml version="1.0" encoding="UTF-8"?> <definitions xmlns:typens="urn:{{var wsdl.name}}" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns="http://schemas.xmlsoap.org/wsdl/" name="{{var wsdl.name}}" targetNamespace="urn:{{var wsdl.name}}"> <types> <schema xmlns="http://www.w3.org/2001/XMLSchema" targetNamespace="urn:Magento"> <import namespace="http://schemas.xmlsoap.org/soap/encoding/" schemaLocation="http://schemas.xmlsoap.org/soap/encoding/" /> <complexType name="fieldInfo"> <sequence> <element name="entity_id" type="xsd:string"/> <element name="name" type="xsd:string"/> </sequence> </complexType> <complexType name="fieldInfoArray"> <complexContent> <restriction base="soapenc:Array"> <attribute ref="soapenc:arrayType" wsdl:arrayType="typens:fieldInfo[]" /> </restriction> </complexContent> </complexType> </schema> </types> <message name="masterapiLoginmodelListRequest"> <part name="sessionId" type="xsd:string" /> <part name="user" type="xsd:string" /> <part name="pass" type="xsd:string" /> </message> <message name="masterapiLoginmodelListResponse"> <part name="customlogin" type="xsd:string" /> </message> <portType name="{{var wsdl.handler}}PortType"> <operation name="masterapiLoginmodelCustomerlogin"> <documentation>List of masterapi</documentation> <input message="typens:masterapiLoginmodelListRequest" /> <output message="typens:masterapiLoginmodelListResponse" /> </operation> </portType> <binding name="{{var wsdl.handler}}Binding" type="typens:{{var wsdl.handler}}PortType"> <soap:binding style="rpc" transport="http://schemas.xmlsoap.org/soap/http" /> <operation name="masterapiLoginmodelCustomerlogin"> <soap:operation soapAction="urn:{{var wsdl.handler}}Action" /> <input> <soap:body namespace="urn:{{var wsdl.name}}" use="encoded" encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" /> </input> <output> <soap:body namespace="urn:{{var wsdl.name}}" use="encoded" encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" /> </output> </operation> </binding> <service name="{{var wsdl.name}}Service"> <port name="{{var wsdl.handler}}Port" binding="typens:{{var wsdl.handler}}Binding"> <soap:address location="{{var wsdl.url}}" /> </port> </service> </definitions> 

In app / code / local / Mycustom / Masterapi / Model / Loginmodel / Api.php

 <?php // app/code/local/Mycustom/Masterapi/Model/Loginmodel/Api.php class Mycustom_Masterapi_Model_Loginmodel_Api { public function customerlogin($user,$pass) { /** @var $session Mage_Customer_Model_Session */ $session = Mage::getSingleton( 'customer/session' ); Mage::app()->getStore()->setWebsiteId(1); try { $session->login( $user, $pass); $customer = $session->getCustomer(); return json_encode(array('status' => 'valid', 'userData' => $customer->getId())); } catch( Exception $e ) { return json_encode(array('status' => 'invalid', 'userData' => $e->getMessage())); } } } 

In / app / code / local / Mycustom / Masterapi / Model / Loginmodel / Api / V2.php

 <?php //app/code/local/Envato/Customapimodule/Model/Product/Api/V2.php class Mycustom_Masterapi_Model_Loginmodel_Api_V2 extends Mycustom_Masterapi_Model_Loginmodel_Api { } 

Towards android: call soap:

  properties.put("sessionId", sessionId); properties.put("user", " [e-mail] "); properties.put("pass","pass"); request = new SoapObject(NAMESPACE, "masterapiLoginmodelCustomerlogin"); env.setOutputSoapObject(request); androidHttpTransport = new HttpTransportSE(URL); androidHttpTransport.call("", env); 

Answer 4

The easiest way to log in as a client:

• Get email id for all customers
• matches it with the entered email id
• if it matches, enter the hash password
• divide the hash password by ":"
• encrypt the entered password using the md5 method. The MD5 method requires a line, one is "salt" (this is a line in the hash password after ":") and the other password is entered.
• matches MD5 pin and hash password (value up to ":")

Here is the code:

 email = " [e-mail] "; string_password = " xyz@123 "; request = new SoapObject(NAMESPACE, "customerCustomerList"); request.addProperty("sessionId",sessionId ); env.setOutputSoapObject(request); androidHttpTransport.call("urn:Magento/customerCustomerList", env); SoapObject response = (SoapObject) env.getResponse(); for(int i=1;i<lengthofResponse;i++) { SoapObject CustomerList = (SoapObject)response.getProperty(i); Object email_id=CustomerList.getProperty(6); int CustomerList_length = CustomerList.getPropertyCount(); Object password=CustomerList.getProperty((CustomerList_length)); selected_email_ids.add(email_id.toString()); response_password=(password.toString().split(":")); selected_password.add(response_password[0]); selected_salt.add(response_password[1]); //comparing password if(email.equals(selected_email_ids.get(j))) { System.out.println("Email is currect"); hash = md5( response_password[1] + string_password); if(hash.equals(selected_password.get(j))) { System.out.println("Welcome"); } } }