|
steven_barnes_simplehelix
|
September 22, 2016 at 1:18 pm
I created an Events administrator account, logged in to that use, created the app password, logged in successfully but I get 2 popups stating that I do not have ee_read_events, ee_read_others_events, ee_read_private_events permissions. I double checked that those roles are indeed checked and applied.
Thoughts?
iOS
10
App Version
2.2
WordPress Version:
4.6.1
PHP Version:
7.0.11
MySQL Version:
5.6.31
Event Espresso Version:
4.9.12.p
|
|
Josh
|
September 22, 2016 at 1:29 pm
That might be because it’s a server that uses FCGI, in which case your app isn’t authenticating. This can be resolved by forcing the server to allow passing the Authorization http headers, and there’s some instructions on how to do that in the mobile app documentation:
https://eventespresso.com/wiki/ee4-event-apps/#troubleshooting
|
|
steven_barnes_simplehelix
|
September 22, 2016 at 1:56 pm
Yeah I checked that. Would the system actually login me in even if I did not have the correct permissions to view the events? Like I said – it’s not that I’m getting a user / password wrong error. It’s like the app is not pulling in the correct permissions.
Side note: While trying to use your demo
URL: eventespresso.com/testdrive
User: myespresso
Pass: myespresso
I am given this error: http://i.imgur.com/MbppB6a.jpg
|
|
Josh
|
September 22, 2016 at 2:27 pm
It’d be great if the apps could better detect authentication issues, but they don’t, so that’s where we’re at.
re: your side note: You’re trying to use the EE3 demo with an EE4 app. The EE4 app does not work with Event Espresso 3.
|
|
steven_barnes_simplehelix
|
September 22, 2016 at 2:37 pm
I just ran
curl -I –user *******:******* http://store/wp-json/ to verify that the username and password were accepted.
and the I’m getting a 200 and ee_cookie_test is set. I would say that means that the user is logged in but EE is not looking up the permissions.
|
|
Josh
|
September 22, 2016 at 2:50 pm
It doesn’t mean that.
Maybe you can try authenticating the way that the mobile apps authenticate, which is by using the http Authorization header.
You can use the Postman app to do an API request to
http://yoursite.com/wp-json/ee/v4.8.36/attendees/
and you set an Authorization header with type Basic Auth, using your username/password. That’s basically the same way the apps authenticate.
|
|
steven_barnes_simplehelix
|
September 22, 2016 at 3:10 pm
{
"code": "rest_attendees_cannot_list",
"message": "Sorry, you are not allowed to list attendees. Missing permissions: ee_read_contacts",
"data": {
"status": 403
}
}
However
http://imgur.com/a/OvNu3
All the boxes appear to be checked.
|
|
steven_barnes_simplehelix
|
September 22, 2016 at 3:11 pm
I also verified the values were correct of the wp_user_roles in the wp_options table.
|
|
Josh
|
September 22, 2016 at 3:14 pm
So does that server use FCGI? If so, then you’ll need to make sure the Basic Auth header gets passed.
|
