Creating a new Member without a token about silverstripe-restfulapi

[colymba]

So... maybe best way to do it is to create your own Authenticator, so we can leave authentication on all methods, but skip it in some cases....

The config would look something like:

RESTfulAPI:
  authentication_policy: true
  dependencies:
    authenticator: '%$RESTfulAPI_CustomTokenAuthenticator'
    authority: '%$RESTfulAPI_DefaultPermissionManager'
    queryHandler: '%$RESTfulAPI_DefaultQueryHandler'
    serializer: '%$RESTfulAPI_BasicSerializer'
Member:
  api_access: 'GET,POST,PUT'
  extensions:
    - RESTfulAPI_TokenAuthExtension

This is just the basic config except this replaces the authenticator dependency with a custom class RESTfulAPI_CustomTokenAuthenticator, but you can call it whatever...

Then create the RESTfulAPI_CustomTokenAuthenticator class that extends RESTfulAPI_TokenAuthenticator and all that should be needed is to overload the authenticate method:

class RESTfulAPI_CustomTokenAuthenticator extends RESTfulAPI_TokenAuthenticator
{
  public function authenticate(SS_HTTPRequest $request)
  {
    if ($request->httpMethod() === 'POST' && $request->param('ClassName') === 'Member')
    {
      return true;
    } else {
      return parent::authenticate($request);
    }
  }
}

This should always allow POST request on the Member DataOBject, otherwise just do the normal authentication. Of course you could do more test etc before return true;...

That's the basics of it... you might to test things out and see how it goes...

[MarkyParkyJozi]

Perfect thanks

[colymba]

you're welcome. glad it worked out.