Thread

We’re hoping to interface an app being developed for iPad with our EE website.

Specifically, we need to check user credentials against the EE members table, and then return a JSON encoded string of various pertinent details.

I’ve had a good trawl across the Internet, but can’t find any guidance on creating a basic script that will accepted POSTed username and password, and then validate. 

This would be quite straightforward if our EE site had had MD5 encryption checked during install, but unfortunately it has been created with the default SHA-1 encryption setting.

Can someone point me in the direction of something that might help?  (Mod, tutorial etc.)

Thanks!

alexlampe,

Not only are ExpressionEngine passwords encrypted, but the crypt is salted. Would you be able to employ the standard ExpressionEngine Login Form as part of your iPad app?

Cheers,

Hi Dan,

Thanks for the response - yes I’ve been impressed by the security in place on EE by default! :(

I had considered whether we could use the login form, but the problem is the App needs a non-standard response (just a JSON object containing certain relevant user fields) rather than the usual ‘you are logged in’ type page to be returned on successful login.  I can’t see a way of achieving this from within the Expression Engine framework?

Thanks1

alexlampe,

Perhaps you could develop an extension that would return your JSON response using the member authorization extension hooks. Do you think that might work?

Cheers,