B4J Tutorial [Web] Plug n Play MySQL Database Authentication via PHP REST API in 5 minutes or less

Hi Fam

Download

You will recall that we did a tutorial on MySQL back-ends using a plug n play CRUD REST API (Related Topics below)

This is based on this GitHub Project

In this approach we will use Database Authentication.

1. Create a database called banano with a table named users, it must have column username and column password. You can set the username to be the primary key.

2. In the api.php file, update the details to be using your MySQL database connection. What is new here is the dbAuth middleware and its settings. With sslRedirect we are saying the server uses HTTPS.

$config = new Config([
        'driver' => 'mysql',
        'address' => '127.0.0.1',
        'port' => '3306',
        'username' => 'root',
        'password' => '',
        'database' => 'banano',
        'debug' => true,
        'tables' => 'all',
        'middlewares' => 'sslRedirect,sanitation,dbAuth',
        'dbAuth.usersTable' => 'users',
        'dbAuth.loginTable' => 'users',
        'dbAuth.usernameColumn' => 'username',
        'dbAuth.passwordColumn' => 'password',
        'dbAuth.registerUser' => '1',
        'dbAuth.loginAfterRegistration' => '0',
        'dbAuth.passwordLength' => '12',
    ]);

What we are saying here is that we will use a database for authorization,

Related Content

[Web][SithasoDaisy] Revolutionize Your Ride: The Ultimate Vehicle Expense Tracker App using Api Key Secure MySQL REST API on top of HTTPS

Hi Fam Are you tired of scrambling through piles of receipts and scribbled notes just to keep track of your vehicle expenses? Say goodbye to the hassle and welcome the future of vehicle management with our cutting-edge Vehicle Expense Tracker App! Built with a secure API key authentication...

www.b4x.com

[Web][SithasoDaisy] Secure CRUD MySQL REST API Web App using Api Key on top of HTTPS

Hi Fam This is a fully functional webapp that showcases categories & products. One is able to toggle views between table listing and a grid listing. Both these have functionality to edit, clone, delete records from the database. When adding products, we load categories in a select/combo box...

www.b4x.com

 

[Mashiane]

Registering a new user

To register a user we need to call the REGISTER route. The location of our api.php file is in the assets folder.

We pass the username & password parameters to this route and execute a POST.

Should you create the same user, an error is raised.

{
    "code": 1020,
    "message": "User 'AneleMbanga3' already exists"
}

Checking your users table, the user is created with a hashed password.

 

[Mashiane]

Login as a User

To login the user to the database, we will pass the username and the password in the LOGIN route.

A successful login returns the username

{
    "username": "AneleMbanga4",
    "email": null,
    "name": null
}

 

[Mashiane]

Log out a user

https://localhost/mysqluseradmin/assets/api.php/logout

 

[Mashiane]

Lets add some nice UI to this...

dbConn.Initialize(Me, "dbConn", Main.DatabaseIP, "users")
    Dim b As Boolean = banano.Await(dbConn.USER_LOGIN(email.Value, password.value))
    If b Then
        pgIndex.UpdateUserName("Anele 'Mashy' Mbanga")
        pgIndex.UpdateUserAvatar("./assets/mashy.jpg")
        pgIndex.IsAuthenticated(True)
        'hide the modal
        mdlSignIn.Hide
    Else    
        banano.Await(app.ShowSwalErrorWait("Login", "The login credentials could not be verified!", "Ok"))
    End If

 

[Mashiane]

To Log off the current user...

Private Sub btnLogOff_Click (e As BANanoEvent)
    e.PreventDefault
    Dim dbConn As SDUIMySQLREST
    dbConn.Initialize(Me, "dbConn", Main.DatabaseIP, "users")
    Dim b As Boolean = BANano.Await(dbConn.USER_LOGOUT)
    If b Then
        IsAuthenticated(False)
        pgSignIn.Show(app)
    End If    
End Sub

 

[Mashiane]

The sign up screen

Dim dbConn As SDUIMySQLREST
    dbConn.Initialize(Me, "dbConn", Main.DatabaseIP, "users")
    dbConn.SchemaAddText(Array("username", "password", "email", "name"))
    dbConn.UseApiKey = False
    Dim b As Boolean = banano.Await(dbConn.USER_CREATE(email.Value, password.value))
    If b Then
        banano.Await(app.ShowSwalSuccessWait("Sign Up", $"The user profile for ${fullname.value} has been created!"$, "Ok"))
        dbConn.PrepareRecord
        dbConn.PrimaryKey = "username"
        dbConn.SetField("username", email.Value)
        dbConn.SetField("name", fullname.Value)
        banano.Await(dbConn.update)
    Else
        banano.Await(app.ShowSwalErrorWait("Sign Up Error", "The user profile could not be created!", "Ok"))
        Return    
    End If