Hi,

I just purchased a subscription, downloaded JBackend and integrated into my site. I'm now trying to get it setup and tested using your helloworld plugin before moving forward and creating my own. Here are the questions I have.

1) In regards to the api keys. Are they guaranteed to be unique or is it possible they can produce the same key twice?

2) Is it possible to send the api key in the header rather than as a parameter? That seems to be the recommended way to pass an api key from what I am finding online.

3) Taking that a step further, would something like jason web tokens we able to to be used instead?

4) I'm trying to use the helloworld plugin as a text on my site. It works if I make the menu item "free", but when I set it to api key I can't get in. I am using sef urls and would prefer to provide them to my clients that way. For the helloworld test I am entering my the url into postman as mydomain/web-api/get/helloword/greeting. Where do I put the api key while still keeping a sef url and using get. Note, I will most likely be using posts for my custom api, however, the option for get would be nice and the helloworld demo only works with get requests.

5) Regarding posts, I tried modifying the helloworld plugin to test with a post and adding the api key, but it still just returns saying api key required. I am using the url as mydomain/web-api/post/helloworld/greeting. In postman I added the form data as key = api_key and value = mykey. I also tried adding it as json using { "api_key":"mykey" } but still just returned error code "REQ_AKR" API key required. Not even that it was an incorrect key, but as if I didn't even supply one. The one I am adding is valid though.

6) I need to provide a live api and a sandbox api. Should this be done with 2 different api keys or should it be done with different urls?

7) I noticed in postman if I put in an invalid url by accident, which is easy to do, I get back the entire joomla page html. Is there any way to prevent this and always return a json error instead? Note, I only want this to be when using the api, the website still needs to work as expected. Could it somehow be done using a subdomain to access the api?

Thank you

John

ok, I ran some more tests and I can't seem to retrieve any values from the request whatsoever. I tried changing the helloworlds onRequestHelloWorld function to look like this.
I tried adding the key "test" to the json body of the request and to the header but this the response I get

So it seems like I am able to get the default data that is defined in the url (action and resource), but nothing else. What could be causing this?

John

Even wierder is is I make the url www.mydomain.com/web-api/post/helloworld/greeting?test=testinurl

the output looks like

Why am I able to add variables to the url even when it is sent as a post? Something doesn't seem right about that. Is this a bug? But either way, I am able to get data from the url, but not the post data regardless of how I send it.

UPDATE:

I found a way to get both the test post data and the api key working with post data, but not completely. It turns out I can only use the form tab (multipart/form-data) or x-www-form-urlencoded. I cannot use the Raw tab with application/json. I tried a few other rest testing applications to make sure it wasn't postman and they all had the same result. So question is, why can I not use json? I would prefer to use json and not being able to could cause issues down the road. Also, I would still prefer to put the api key in the header. Is it possible, even if I have to edit the jBackend source code?

Ok, I figured out how to get the key from the header by usingNote that I had to remove the _and just set it as apikey or it would not show up in the array. api-key would not either.