{"action":"created","issue":{"url":"https://api.github.com/repos/techjoomla/com_api/issues/71","repository_url":"https://api.github.com/repos/techjoomla/com_api","labels_url":"https://api.github.com/repos/techjoomla/com_api/issues/71/labels{/name}","comments_url":"https://api.github.com/repos/techjoomla/com_api/issues/71/comments","events_url":"https://api.github.com/repos/techjoomla/com_api/issues/71/events","html_url":"https://github.com/techjoomla/com_api/issues/71","id":293410405,"number":71,"title":"API use in external sites","user":{"login":"amitdangwal","id":2646843,"avatar_url":"https://avatars3.githubusercontent.com/u/2646843?v=4","gravatar_id":"","url":"https://api.github.com/users/amitdangwal","html_url":"https://github.com/amitdangwal","followers_url":"https://api.github.com/users/amitdangwal/followers","following_url":"https://api.github.com/users/amitdangwal/following{/other_user}","gists_url":"https://api.github.com/users/amitdangwal/gists{/gist_id}","starred_url":"https://api.github.com/users/amitdangwal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/amitdangwal/subscriptions","organizations_url":"https://api.github.com/users/amitdangwal/orgs","repos_url":"https://api.github.com/users/amitdangwal/repos","events_url":"https://api.github.com/users/amitdangwal/events{/privacy}","received_events_url":"https://api.github.com/users/amitdangwal/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-01T05:43:24Z","updated_at":"2018-02-02T10:20:34Z","closed_at":null,"author_association":"NONE","body":"Hi Team,\r\nI was searching for webservice for joomla and landed here. I have tried your plugin and it is working with the demo users plugin. I have requirement to allow external web applications(a wordpress site) to access my joomla system for some specific data. Earlier wordpress site used to have a iframe which points to my joomla page but now we want to move to webservice layer so that wordpress can fetch data using your webservice plugin from my joomla(com_api will be installed in joomla and a user key will be created). \r\n\r\nI was reading tickets, documentation, issues mentioned by other users so as to gather more information. I came to know about issue: Token issue #27\r\nhttps://github.com/techjoomla/com_api/issues/27\r\n\r\nNow since the webservices will be called by a browser dependent client application (wordpress site) then does it mean the user(whosoever) opened the browser page of wordpress site(which makes call com_api the wordpress template or functions.php file) will be automaticly gets logged in joomla system too ? i.e wohosoever the user is, if opens my site www.xyzjoomla.com will be automaticly logged in joomla (using the user key I created) ? Is this correct ? I donot want any person browsing wordpress site gets logged in joomla system as they are not supposed to access joomla.\r\n\r\nPlease confirm if this is the behaviour and in such case do I need to modify authentication.php file?\r\nhttps://github.com/techjoomla/com_api/blob/master/code/site/libraries/authentication.php\r\n\r\nThanks,\r\nAmit\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/techjoomla/com_api/issues/comments/362546497","html_url":"https://github.com/techjoomla/com_api/issues/71#issuecomment-362546497","issue_url":"https://api.github.com/repos/techjoomla/com_api/issues/71","id":362546497,"user":{"login":"coolbung","id":429363,"avatar_url":"https://avatars0.githubusercontent.com/u/429363?v=4","gravatar_id":"","url":"https://api.github.com/users/coolbung","html_url":"https://github.com/coolbung","followers_url":"https://api.github.com/users/coolbung/followers","following_url":"https://api.github.com/users/coolbung/following{/other_user}","gists_url":"https://api.github.com/users/coolbung/gists{/gist_id}","starred_url":"https://api.github.com/users/coolbung/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coolbung/subscriptions","organizations_url":"https://api.github.com/users/coolbung/orgs","repos_url":"https://api.github.com/users/coolbung/repos","events_url":"https://api.github.com/users/coolbung/events{/privacy}","received_events_url":"https://api.github.com/users/coolbung/received_events","type":"User","site_admin":false},"created_at":"2018-02-02T10:20:34Z","updated_at":"2018-02-02T10:20:34Z","author_association":"OWNER","body":"If you're making the API call from the client-side eg: using an AJAX call, then the user (for whom the token is created) will indeed get logged in. However this means that you will be exposing the token to public, I don't think you'd want to do that.\r\n\r\nHowever, if the API call is being made via PHP (eg: using CURL or wordpress' methods) then the user won't get logged in to Joomla. \r\n"}}
{"actor":{"display_login":"coolbung"}}