search

seCon-dev-team / seCon-demo

This is our demo project, that includes our products's POC that will be displayed to future customers
0 stars 0 forks source link

API requests #1

Open avigi opened 7 years ago

avigi commented 7 years ago

Hi Daniel. I would like to get an API list which u think u need from me (based on your client UI screens) in order to write my SERVER.

*In your free time, don't rush

dtsanan commented 7 years ago

Hi Avi,

Here is the API calls list:

  1. calling the seCon service from the client's login page. api: "api/verifySeconUsername/:username" method: GET response: success: "ok", fail:"User Name does not exist" on success: seCon login window appears.

    1. login to seCon. api: "api/seCon/auth" method: POST payload: { userName(string), password(string) } response: success: "ok", fail:"wrong password!" on success: getClickableImages api call dispatched.

    2. get clickable images api: "api/seCon/getClickableImages" method: GET response: {Imageurl: [...{ imageUrl(string), imageIndex(number) }...], questionKey(string) }

    3. validate clickable images. api: "api/seCon/validateClickableImages" method: POST payload: { indexesArr [2] (number) } response: success: { token(string), userName(string)}, fail:"wrong images were clicked. please try again" on success: a link with the text "all set! click here to login to the ${dynamic_client_name} website" appears, which wraps inside it the approving token sent by seCon.

  2. login to client website. api: "api/${dynamic_client_url}/login" method: POST payload: { token(string), userName(string)} response: success: "ok", fail:"something went wrong. please contact seCon service" on success: user logged in to the client website

avigi commented 7 years ago

חזק אתה דנדוניי

On Wed, May 24, 2017 at 12:01 AM, dtstsUI notifications@github.com wrote:

Hi Avi,

Here is the API calls list:

  1. calling the seCon service from the client's login page. api: "api/${dynamic_client_url}/seConLogin/:username method: GET response: success: "ok", fail:"User Name does not exist" on success: seCon login window appears.
  2. login to seCon. api: "api/seCon/auth" method: POST payload: { userName(string), password(string) } response: success: "ok", fail:"wrong password!" on success: getClickableImages api call dispatched.
  3. get clickable images api: "api/seCon/getClickableImages method: GET response: [...{ imageUrl(string), imageIndex(number) }...]
  4. validate clickable images. api: "api/seCon/validateClickableImages method: POST payload: { indexesArr2 http://number } response: success: { token(string) }, fail:"wrong images were clicked. please try again" on success: a link with the text "all set! click here to login to the ${dynamic_client_name} website" appears, which wraps inside it the approving token sent by seCon.
  5. login to client website. api: "api/${dynamic_client_url}/login" method: POST payload: { token(string)} response: success: "ok", fail:"something went wrong. please contact seCon service" on success: user logged in to the client website

— You are receiving this because you were assigned. Reply to this email directly, view it on GitHub https://github.com/seCon-dev-team/seCon-demo/issues/1#issuecomment-303531132, or mute the thread https://github.com/notifications/unsubscribe-auth/AMM0omQNdLG-ItvVIlaOZs4q8K9WwEHqks5r80lFgaJpZM4Njhoe .