Token invalid about silverstripe-restfulapi

[colymba]

Do you have a sample request payload and headers we could look at? How are you passing the token? It should be in a X-Silverstripe-Apitoken header or fallback to a requestVar.

[luukgruijs]

Thanks for your answer,

I was just testing everything by typing the url in the browser and see the return on my localhost. If i understand you correctly we need to store te tokens in the header where we do the get or post? All the REST stuff is kind off new for me so i have to figure that out.

[colymba]

if you try something like api/TherapyGroup/1?X-Silverstripe-Apitoken=XX you should actually get an output in your browser (replacing XX with an actually token). The TokenAuthenticator fallsback onto a request var to get the token if it is not in the header.

One easy way to get a token is via the Auth methods: api/auth/login?email=***&pwd=***

Otherwise, Postman for Chrome is pretty good if you want to test stuff: https://chrome.google.com/webstore/detail/postman-rest-client/fdmmgilgnpjigdojojpjoooidkmcomcm?hl=en

[luukgruijs]

Thanks again,

i tested it in Postman and when i do a get with headers it works but when i do it with URL parameters it doesn't work.

At least i could go on now. Thanks!

[colymba]

Cool, good to hear.

[jnoliver2]

Im using the latest stable version and this does not work. It is failing when it tries to read the generated token in the database on function validateAPIToken. The ApiToken field is not in the Members fields. I had to decorate the members class with ApiToken field and ApiTokenExpire for this to work. Was I missing something?

[luukgruijs]

I think you forget the right things in config.yml. https://github.com/colymba/silverstripe-restfulapi/blob/master/doc/TokenAuthenticator.md#token-authentication-data-extension-restfulapi_tokenauthextension

[jnoliver2]

Aha.. I didn't see that. Please Include it on the example config you gave on README. Thought those were all the configs needed.

[colymba]

as mentioned by @luukgruijs did you add the RESTfulAPI_TokenAuthExtension and updated tokenOwnerClass accordingly?