Update user e-mail via API

ikonrad

Hi!

Thanks for creating this awesome forum. I totally love it.

I'm trying to set up Single sign on with my current application, and one of the features if to share e-mail addresses with my main database.

So when user udpates e-mail address on my page, it should update it on forum as well.

I'm using PATCH request to /api/users/4 with the following payload:

{
	"data": {
		"type": "users",
		"id": "4",
		"attributes": {
			"email": "new@email.com",
		}
	},
     "meta.password": "pass123"
}

But it doesn't seem to work.

From what I've noticed, it reaches the EditUserHandler class and attempts to save the data with ->save(), but it doesn't have the updated e-mail address. Then it attempts to call ->save() again, but the $exists property returns false and it tries to insert a new row instead.

I haven't had the chance to look at it more deeply so any advice will be highly appreciated.
Thanks
Konrad

luceos

ikonrad most likely you simply don't have permission to update that user. I recommend using a master token for this.

Generate a 40 character random, unguessable string, this is the Token needed.
Manually add it to the api_keys table using phpmyadmin/adminer or another solution.

See this

ikonrad

luceos Sweet! It seem to work just fine! I didn't realise that api_key and access token can be used interchangeably.

Topic can be closed now.

devdevov

luceos
I am trying to send a PATCH Request to change users password and it is not changing. I tried with other filds and they don't change too.

$client = new FlarumClient('https://forum.mydomain.com', ['token' => 'TOKEN_FROM_API_KEYS_TABLE; user_id=1'], ['verify' => true]); 

$data = [
            "data" => [
            "type" => "users",
            "id"    => 132,
            "attributes" => [
                    "email"         => "user.email@gmail.com",
                    "password" => 'myPassWord'
            ]],
            "meta.password"=> "pass123"
    ];
$res = $client->request('PATCH', '/api/users/132', $data);

Guzzle sends me back a response of

{"status":200,"message":"{\"data\":{\"type\":\"users\",\"id\":\"132\",\"attributes\":{\"username\":\"mobile_user\",\"displayName\":\"mobile_user\",\"avatarUrl\":null,\"slug\":\"mobile_user\",\"joinTime\":\"2022-10-09T15:12:34+00:00\",\"discussionCount\":0,\"commentCount\":0,\"canEdit\":true,\"canEditCredentials\":true,\"canEditGroups\":true,\"canDelete\":true,\"lastSeenAt\":\"2022-10-10T18:37:09+00:00\",\"isEmailConfirmed\":true,\"email\":\"user.email@gmail.com\",\"fof-upload-uploadCountCurrent\":0,\"fof-upload-uploadCountAll\":0,\"suspendReason\":null,\"suspendMessage\":null,\"suspendedUntil\":null,\"canSuspend\":true},\"relationships\":{\"groups\":{\"data\":[]}}}}"}

But the user password doesn't change.
What am I doing wrong?
Thanks in advance!

devdevov

I found a solution using Curl in another post:
$url = 'https://forum.mydomain.com/api/users/132'; $data = '{"data":{"type":"users","id":"132","attributes":{"email":"newemail2@gmail.com","password":"mypass"}}}'; $headers = array('Content-Type: application/json', 'Authorization: Token TOKEN_FROM_API_KEYS_TABLE'); $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_CUSTOMREQUEST, 'PATCH'); curl_setopt($curl, CURLOPT_POSTFIELDS, $data); curl_setopt($curl, CURLOPT_HTTPHEADER, $headers); $res = curl_exec($curl); curl_close($curl);

devdevov

I just had to change the Guzzle Request to json Content-Type... 🙂
$res = $client->request('PATCH', '/api/users/132', ['json' => $data]);

luceos

devdevov I actually looked at your issue yesterday, then forgot about it 😞. It's great that you've discovered the solution autonomously, well done!