CODEWITHSUNDEEP
phpapiresthttpvtiger
edode
edode

Reputation: 43

I can't make a basic http authentication using PHP

I have a work to do and I need to login to the webpage, and extract content from it. The query has to be made of a username and an access key. The problem is that I don't really know how to make a query with thos 2 elements, and in PHP. So, I have found this code have this code :

$ak =  "accesskey";

$username = 'admin';
$password = '123';
$remote_url = 'http://192.168.1.78/index.php';

// Create a stream
$opts = array(
    'http'=>array(
        'method'=>"GET",
        'header' => "Authorization: Basic " . base64_encode("$username:$ak")
    )
);

$context = stream_context_create($opts);

// Open the file using the HTTP headers set above
$file = file_get_contents($remote_url, false, $context);

print($file);

But the output is simply the Webpage code, from the <!DOCTYPE html><html> to </html>

According to the webpage REST API, the result that I need to get is this :

{
    success: true,
    result: json_result
}

Any idea why it doesn't work ?

PS : here is the API documentation : https://www.vtiger.com/docs/rest-api-for-vtiger#/Authentication

Upvotes: 0

Views: 233

Answers (1)

Michael restore Monica Cellio
Michael restore Monica Cellio

Reputation: 889

The vTiger API (in 7.2 at least) has an odd combination of parameter and form POST payloads. Here is the Python script I used to get started. Note that it uses param in the getchallenge hit but data in the login hit:

import requests
from hashlib import md5
import urllib3

urllib3.disable_warnings()  # shut up whining about that security stuff

encoding = 'ascii'
userName = 'Michael'
userToken = (access key from my preferences page)
APIURL='https://our.crm.instance/webservice.php'

session = requests.Session()

def getSession(session, name, token):

    response = session.get(APIURL, params={'operation':'getchallenge', 'username':userName}, verify=False)

    token_key = response.json()['result']['token']

    combined = token_key + userToken

    accessKey = md5(combined.encode(encoding)).hexdigest()

    response1 = session.post(APIURL,
            data={'operation':'login', 'username':userName, 'accessKey':accessKey},
            verify=False)
    return response1.json()['result']['sessionName']

sessionToken = getSession(session, userName, userToken)

types = session.get(APIURL, params={'operation':'listtypes', 'sessionName':sessionToken})
print(types.json())

Upvotes: 0

Related Questions