How to access "password" fields via REST API

[MattFL]

How can I authenticate user passwords against a "password" type field in a Caspio view via the REST API?  "Select" does not work with fields of type "Password" and I can't seem to figure out how to access the data. 

I'm writing a mobile application that uses the REST API to access our data via "views".  One of the fields is a "password" field, and I need to be able to compare the password that the user enters into my application with the password stored in the database.  I don't need to extract the password field, but I do need to know if the password entered by the user matches what's stored in the database.  Any tips on how to do this, or links to documentation, would be greatly appreciated. 

[Tubby]

I think not much has changed with their system security. Check this article https://howto.caspio.com/web-services-api/rest-api/special-considerations/

Getting the Password fields through API is still blocked as it seems. So any information regarding it or the idea that @MattFL has is still not feasible, if I am not mistaken.

[Vitalikssssss]

On 5/10/2017 at 9:21 PM, MattFL said:

How can I authenticate user passwords against a "password" type field in a Caspio view via the REST API?  "Select" does not work with fields of type "Password" and I can't seem to figure out how to access the data. 

I'm writing a mobile application that uses the REST API to access our data via "views".  One of the fields is a "password" field, and I need to be able to compare the password that the user enters into my application with the password stored in the database.  I don't need to extract the password field, but I do need to know if the password entered by the user matches what's stored in the database.  Any tips on how to do this, or links to documentation, would be greatly appreciated. 

 

 

 

 

Hi MattFL,

I guess that is a system security restriction which you will not be able to overcome.

http://howto.caspio.com/integration/web-services-api/rest-api/special-considerations/

You may try to authenticate the user based on another field type. 

Quote

Password fields are special data type fields that are meant for storing encrypted values. You cannot obtain the value stored in password fields. All requests that attempt to get their values via Select or in other ways such as in Criteria, cause an error. When all fields of a table or view are returned via “Select *” or empty field list, password fields are skipped.

 

 

1

 

 

[MattFL]

Thanks for the reply.  That is the conclusion I came to myself as well, I was just hoping I had missed something.  Maybe in the future there will be a way to authenticate against the field at least.  Perhaps send a hash or a password and receive back a bool indicating a match,  etc...   

Thanks! 

[AndrewCHughes]

Yeah, this would be nice. Seems like a strange feature to be missing.

[Jarias]

Agreed!

[Elderberg]

anyone know if there's any solutions to this challenge since the original post?

 

[HappyAlligator]

Sad thing not to be possible to do a login via API, with the "war" against cookies more soon than later login in Caspio for the clients/users is going to be a problem