Registering users from external script?

fafler

Hi. I looking for some forum software for my Minecraft server. A crucial feature I need, is registering players ingame instead of letting them sign up from the forum. This way, players won't need email validation and forum names and player names will always match up. Is it possible to do this with Flarum? Either by using curl with a URL that registers the player, or a shell script that hashes the passwords and sends the information directly to the MySQL database?

Thank in advance.

Lucas

I don't see why you wouldn't be able to register someone by entering the data from whatever page/script you made directly to the Flarum database. Probably using the same encryption method that Flarum uses should be enough.

tarun

Wouldn't the Users API - POST /api/users - register a new user - help with this?
http://flarum.org/docs/api/

tarun

I tried playing around with that user creation API but I'm doing something wrong with the POST request… hope somebody can help me out here...

I see from the code that the Flarum\Core\Users\User class was expecting name, email, and password. I used PAW and created the variables in the request body as shown in the screenshot below.. but the server returned a 500 Internal Server Error... What am I missing here?

MathisLogemann

tarun for others:
to register a user there must be the token set in the header of the request and the json must be like this:

{"data":
     { "attributes":
          {
              "username":"mickey",
              "email":"mickey@disney.com", 
              "password":"hellokitty"
          }
      }
}

Franz

Did that 500 response contain any detailed error message?

tarun

Franz Nope..

This is what I tried to send:

POST /Flarum/api/users HTTP/1.1
Authentication: KtlxzltCZG0cZicb6dkQyQylg4rEIFpozycc4xLk
Content-Type: application/json
Host: localhost
Connection: close
User-Agent: Paw/2.2.2 (Macintosh; OS X/10.10.5) GCDHTTPRequest
Content-Length: 69

{"name":"mickey","email":"mickey@disney.com","password":"hellokitty"}

This is all I got as a response:

HTTP/1.0 500 Internal Server Error
Date: Wed, 09 Sep 2015 07:29:25 GMT
Server: Apache/2.2.29 (Unix) mod_fastcgi/2.4.6 mod_wsgi/3.4 Python/2.7.8 PHP/5.6.2 mod_ssl/2.2.29 OpenSSL/0.9.8zg DAV/2 mod_perl/2.0.8 Perl/v5.20.0
X-Powered-By: PHP/5.6.2
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

luceos

tarun what does the error log say if the site?

tarun

Aha! Thanks for that tip luceos! I checked the apache and php error logs, and found these 2 entries in in the PHP error log. They were created together when I performed the POST request above.

[09-Sep-2015 10:33:44 Europe/Berlin] PHP Deprecated:
Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0.

[09-Sep-2015 08:33:45 UTC] PHP Catchable fatal error:
Argument 2 passed to Flarum\Core\Users\Commands\RegisterUser::__construct() must be of the type array, null given, called in /Users/tarun/Code/Flarum/flarum/vendor/flarum/core/src/Api/Actions/Users/CreateAction.php on line 77 and defined in /Users/tarun/Code/Flarum/flarum/vendor/flarum/core/src/Core/Users/Commands/RegisterUser.php on line 35.

Franz

Your request is invalid. The body should look more like this:

{"data": {"name":"mickey","email":"mickey@disney.com","password":"hellokitty"}}

That's because we follow the JSON-API standard.
That said, we should probably make sure to provide a more helpful error in these cases. 🙂

tarun

Franz Thank you. I changed my request according to your advice. Something still seems to be wrong... looks like it has to do with validation.

Corrected POST Request:

POST /Flarum/api/users HTTP/1.1
Authentication: KtlxzltCZG0cZicb6dkQyQylg4rEIFpozycc4xLk
Content-Type: application/json
Host: localhost
Connection: close
User-Agent: Paw/2.2.2 (Macintosh; OS X/10.10.5) GCDHTTPRequest
Content-Length: 78

{"data":{"name":"mickey","email":"mickey@disney.com","password":"hellokitty"}}

API Response:

HTTP/1.1 422 Unprocessable Entity
Date: Wed, 09 Sep 2015 08:58:46 GMT
Server: Apache/2.2.29 (Unix) mod_fastcgi/2.4.6 mod_wsgi/3.4 Python/2.7.8 PHP/5.6.2 mod_ssl/2.2.29 OpenSSL/0.9.8zg DAV/2 mod_perl/2.0.8 Perl/v5.20.0
X-Powered-By: PHP/5.6.2
Content-Length: 162
Connection: close
Content-Type: application/json

{"errors":[{"detail":"validation.required","path":"username"},{"detail":"validation.required","path":"email"},{"detail":"validation.required","path":"password"}]}

Franz

Ah, my example was incorrect. Check out this section of the JSON-API spec, it explains everything in detail. Also, "name" should be "username".

luceos

Validation checks whether the send input is according to the validation rules. Just compare it with a form the validation rules will make you return to the form with the incorrect fields red and the validation.* message are translated to some string. See the laravel validation rules for what they mean: http://laravel.com/docs/5.1/validation#available-validation-rules

This will help you in the long run. No idea whether Franz link says the same.