Multi site requests

rahy · April 6, 2021, 5:25pm

Yes. from branch to central.

shareeef · April 6, 2021, 5:26pm

You are not able to follow

rahy · April 6, 2021, 5:27pm

What do you mean?

shareeef · April 6, 2021, 5:28pm

I mean, you cannot generate a key and secret belonging to central site user at branch site without knowing a way to login to central site…

You want to accomplish this:

A branch site will connect to central site, generate a key and secret and connect to central site.
Use the secret to post some info to central site from branch

You have problem at step 1 itself, you cannot connect to central site without key and secret known in advance.

rahy · April 6, 2021, 5:34pm

You got me thinking… and I made mistake

This I mean login to central site… sorry.
So #1-3 happen in central (remote) site.

shareeef · April 6, 2021, 5:34pm

Yes correct, now you got it.

shareeef · April 6, 2021, 5:35pm

You don’t need to generate keys and secrets at all on branches…this is called over engineering, or over thinking…

rahy · April 6, 2021, 5:35pm

That is what I did. Just wrongly write it

shareeef · April 6, 2021, 5:37pm

So how are you connecting to central site from branch to generate a key? Using central site’s username and password. Right?

rahy · April 6, 2021, 5:37pm

yes correct. because user and password can be created remotely.
The mysite.com is actually should be centralsite.com or remotesite.com

shareeef · April 6, 2021, 5:44pm

you are not getting the main point → You are already using the secret of central site to connect and generate keys…you don’t need to do that…

You first learn how API keys authentication work and then use it. You don’t have full understanding of the concepts and trying to use it and getting confused.

I am hopeful you will understand the issue soon, I will pray for you. Have a good night.

rahy · April 6, 2021, 5:47pm

Well ok… Thank you a lot for the discussion. A good night to you too.

shareeef · April 7, 2021, 4:33pm

Were you able to resolve? I may not have pointed to you but your step 1 where you are login into central site using the username and password from branch application. This is known secret, instead of using username and password to login, use the API secret and key created before hand and you don’t need to do step 1 and step 2, and directly use API to post…

rahy:

#1 - First login to the branch site:

urllog = 'https://mysite.com/api/method/login'
paramlog = {
    'usr': 'administrator',
    'pwd': 'a1b2c3'
}
rlog = requests.post(url, headers=headers, params=paramlog)
return rlog.cookies

federico_calvo · April 7, 2021, 6:49pm

Hi @rahy, We did something similar with SSO OAuth0 for the ticketing system, but it is complex and untested.

I’m trying to see if something similar is possible with Event Streaming, I don’t know what you think.

rahy · April 8, 2021, 2:30am

@shareeef,
I’ll try your suggestions.

@federico_calvo,
Event Streaming in v13? Not using it yet, still in v12.