You are viewing this forum as a guest. Login to an existing account, or create a new account, to reply to topics and to create new topics.
Hi Nick
Logic check if you don't mind.
I created an app for IOS that currently does the following using a new ECOM_IOSAPI class - all works correctly.
User can log in on App to K9 account using email/password or Sign in with Apple.
Once logged in, they can view/modify profile and address book, including adding a new address, edit/delete address + set default address.
View shopping cart including update quantity and remove item..
All this works perfect and any changes are immediate in browser account/basket.
All of my custom products including visualisation is working via a route which using the same class to create the images, prices, item options, etc.
When adding item to basket for logged in user, I set the core_session.ecom.cartid to user cartid and the item successfully adds to their basket.
Still working on creating guest session similar to browser cookie set up for guests.
API will be secure via APIKEY and logged in user session creates a JWT token.
Am i missing anything obvious with regards to security.
Any suggestions?
Thanks
Rob
Offline
If you're passing all the auth logic through to K9 to do the authentication, then you've covered the bases you need to in order to ensure proper user auth. You're basically replacing the token logic in K9 with your JWT, which is fine. I'd like to see this app once you'd done with it.
Offline
Hi Nick
I have sent two videos to level1support email for you to look at. They show the website and app working simultaneously. Plenty still to do, but you can see the main connection is all set up for accounts, addresses, baskets, etc. Order History also works.
I was quoted £100,000 for an App 5 years ago, with £30,000 before a single digit of code was written and without any APi interaction with current database. So far this has cost me $58
Appreciate this is outside normal support requests to Krytptronic, and I don't really need support, but would love to hear any thoughts, suggestions, criticisms as they are aways invaluable coming from you.
Offline
Rob: You impress me with most of what you do, but this is AWESOME! That £100 from five years ago is probably more like £200 today, so you did very well on the cost-front. I'm wondering what the £58 in expenses was for. Soda and candy bars?
I really like the look and feel of the app - it mirrors the native OS well so it should be very user friendly. What you've done to your K9 site is great - most people leave it styled stock - but you've changed most of the displays (and for the better). The address book looks implemented very well - which I know wasn't the easiest thing to pull off. If you've got it working at this level this well I have a feeling everything else will wrap up easily for you.
One thought I had while viewing the videos is that guest functionality is missing (or not evident in the videos). At first I thought that made sense as you're tying one to the other, but you could technically support guests on both frontends and there wouldn't need to be any crossover unless a guest logs in with a new account (but K9 handles that). Of course the whole guest thing might go against your intended app flow/marketing scheme. FYI: You figured out user accounts (acct info in core_users, tied to core_session), guests are similar but everything exists in core_session (session data contains most of the same fields from core_users relating to user info).
The fact that you've needed no support and had no questions while developing this blows my mind. Although you have been using our stuff for a very long time.
Offline
Thanks Nick - really appreciate the comments.
i started out with the intention of just allowing account holders to place orders, but it doesn't make sense so I will implement a similar guest token system when I've got the user version locked down from start to finish, with payments, checkout and confirmation emails,etc.
$58 is what I have spent with my bestie - grok!
I'll let you know when it is complete next month(although that might be Nick time!)
Offline