Using the J! API to authenticate external app against J! d/b

[sclg]

I have an existing external d/b application (entirely independent of J!) which lets users log into it using their J! login and password.
Currently, it just works by hashing the user entered password, directly reading the J! user database table to retrieve the password for the given username and comparing the two. Not elegant but it works.

It would obviously be better if it could use the J! API but I can't find anything in there that helps.
For example, GET users/{user_id} does not return the password.

Am I missing something, or is this not currently possible with the J4 API??
Thanks

[carlitorweb]

No, the webservice for Users only return this for a user:

Code: Select all

protected $fieldsToRenderItem = [
        'id',
        'groups',
        'name',
        'username',
        'email',
        'registerDate',
        'lastvisitDate',
        'lastResetTime',
        'resetCount',
        'sendEmail',
        'block',
    ];

Make sense also do not return the passwords like that.

Thinking fast, a workaround I can think now is: Use the api-authentication method of Joomla.

[sclg]

I thought the api authentication stuff only supported superuser accounts?
Or am I misunderstanding what you mean? (Entirely possible!)

[Per Yngve Berg]

The Password is hashed with a one way method and cannot be retrieved.

https://api.joomla.org/cms-4/classes/Jo ... fyPassword

[sclg]

The Password is hashed with a one way method and cannot be retrieved.

Not a problem currently - the other app stores the hashed password and compares it with the J! hashed password.
I was just looking for an api way to return the hashed password.

[Per Yngve Berg]

The function verify the password, it does not return the hashed password.

[carlitorweb]

I thought the api authentication stuff only supported superuser accounts?
Or am I misunderstanding what you mean? (Entirely possible!)

Yes that is correct. But is right, you cant use it like that

[carlitorweb]

What about create your own webservice? In this way you can get exactly what you want.

This can help for that: https://manual.joomla.org/docs/web-serv ... se-format/

[Per Yngve Berg]

https://api.joomla.org/cms-4/classes/Jo ... ation.html

[sclg]

https://api.joomla.org/cms-4/classes/Jo ... ation.html

Thanks