{"id":488,"date":"2019-08-10T11:36:38","date_gmt":"2019-08-10T11:36:38","guid":{"rendered":"https:\/\/help.unitedover.com\/digits\/?post_type=manual_kb&p=488"},"modified":"2024-08-05T19:31:49","modified_gmt":"2024-08-05T19:31:49","slug":"rest-api","status":"publish","type":"manual_kb","link":"https:\/\/help.unitedover.com\/digits\/kb\/rest-api\/","title":{"rendered":"REST API"},"content":{"rendered":"\n

This addon for Digits<\/a> provides the functionality of login\/signup using mobile phone numbers to your WordPress site using REST API. <\/p>\n\n\n\n

Check our Postman API Samples from here<\/a>.
(https:\/\/documenter.getpostman.com\/view\/37319001\/2sA3kbhK2q<\/a>)<\/p>\n\n\n

Authentication<\/strong><\/h3>\n

The API is token-based as its more secure than the conventional method. Also since it does not use credentials, you can restrict access anytime.<\/p>\n

Access Token<\/strong> is a token that can be sent used as a replacement for user credentials for further requests. To authenticate with an access token, the request needs to be sent with header<\/p>\n

Authorization<\/strong>: Bearer access_token<\/code><\/p>\n

Note: you will need to re-request access token if the user has changed his password.
<\/em><\/p>\n

Access Token Validity
<\/strong>If an Access token is not used for more than 14 days it will expire, then you\u2019ll need to request the token again. You can even change the expiry from REST API addon settings. If the token gets expired you\u2019ll get the below error with 401 HTTP error code<\/p>\n

{“success”:false,”data”:{“error”:”token_expired”,”message”:”Your session has expired. Please login again”}}<\/div>\n

If authorization fails, it will return 401 HTTP code<\/p>\n

{“success”:false,”data”:{“error”:”invalid_token”,”message”:”Invalid Token”}}<\/div>\n

If authentication is not working you will need to add this to your .htaccess<\/p>\n

RewriteEngine On\nRewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]<\/pre>\n
You will also need to add this to httpd.conf<\/p>\n
SetEnvIf Authorization \"(.*)\" HTTP_AUTHORIZATION=$1<\/pre>\n\n\n
<\/div>\n\n\n\n
NOTE: The request should be sent as POST Parameters in Body<\/strong><\/p>\n\n\n\n
<\/div>\n\n\n\n
If using Firebase Gateway<\/h4>\n\n\n\n
You’ll also need to add their native libraries to send OTP as we will verify them with tokens.

You can verify if your token is correct or not here https:\/\/jwt.io\/<\/a>

For more information visit: https:\/\/firebase.google.com\/docs\/auth\/admin\/verify-id-tokens#retrieve_id_tokens_on_clients<\/a><\/p>\n\n\n\n
<\/div>\n\n\n\n
Flow Chart<\/h3>\n\n\n\n
<\/div>\n