Skip to Content (Press Enter)
UserImage.jpg
James Price
581Views
7Comments
Consume REST API for authentication
Question

Maybe I'm asking the wrong question, but I need to do the following:


Use an external REST API for authentication.  I have successfully setup the api call, but now I'm not sure what I need to do to substitute that login method for the 'normal' OutSystems login.


Anyone point me in the right direction?


Thanks!

1
0
21 Aug 2018
Copy Link
2018-05-16 11-16-36
João Heleno
 
MVP

@James

Can you tell us which API is that?

You have some tips about integrating external authentication providers here.

Let us know if you need more help with this subject.


Regards,

João

0
0
21 Aug 2018
Copy Link
UserImage.jpg
James Price

João Heleno wrote:

@James

Can you tell us which API is that?

You have some tips about integrating external authentication providers here.

Let us know if you need more help with this subject.


Regards,

João


It's a simple REST API: /api/user/login accepts a post containing a (JSON formatted) user id and password, and upon successful login returns an authentication token. I'd like to substitute this for the default OutSystems mobile login. The end goal (probably a couple of iterations in the future) is to use the end-user's work authentication system, so this is just a stepping stone to that.

1
0
21 Aug 2018
Copy Link
2018-05-16 11-16-36
João Heleno
 
MVP

OK, we have a new variable. You're talking about login in an OutSystems mobile app. Is that it? 

0
0
21 Aug 2018
Copy Link
UserImage.jpg
James Price

Yeah, mobile app, needs to login using a non-OutSystems REST api.

0
0
21 Aug 2018
Copy Link
2018-05-16 11-16-36
João Heleno
 
MVP

I've yet to implement such a system.

There are some downsides though:

  • You'll loose the built in platform login features;
  • You'll have the build all the validation logic;
  • Role validation will have to be client side only (most likely);
  • You'll probably have to think about encrypting data in your local storage;

&Etc


0
0
21 Aug 2018
Copy Link
2019-09-24 18-41-25
Jorge Martins
 
MVP

@João Heleno, not really... you just have to change how the authentication happens, no need to worry (yet!) about authorisation.

@James, my suggestion is:

  • Open the Users module (it will clone it).
  • Open the User_Login server action and inspect how it is implemented (that's the default action used to login either via OutSystems local database, AD or LDAP authentication).
  • Use that action as guide to implement your DoLogin server action, following a similar implementation to the AD or LDAP implementation but instead calling your REST API authentication.
1
0
22 Aug 2018
Copy Link
UserImage.jpg
James Price

OK, so after looking at the User_Login server action, 1 question:


Where do I find the 'Site' (property?)? I'd like to set a property under site (eg - UseAPILogin) and have the User_Login action test for that BEFORE all of the other tests. Then store the token returned (on a successful login) for other actions.


That brings up another question: what's the 'best practice' way to store the returned token? 

2
0
22 Aug 2018
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.