Changes to SESSION data for user authorization in WHMCS v8

[alim_zeytulaev]

Hello, community.

in whmcs v8 this logic for user / client authorization doesn't work

$ _SESSION ['uid'] = $ entry-> id;
$ _SESSION ['upw'] = \ WHMCS \ Authentication \ Client :: generateClientLoginHash ($ entry-> id, '', $ entry-> password, $ entry-> email);

and I check the SESSION array after login as owner from admin section and find new parameter "login_auth_tk", in older whmcs versions this parameter does not exist

[login_auth_tk] => {
"id": uid,
"email": user_email,
"password":?, (should be the database password (tblusers-> password) or something else?)
"userip": userip,
"timestamp": time (),
"hash": \ WHMCS \ Authentication \ Client :: generateClientLoginHash ($ entry-> id, '', $ entry-> password, $ entry-> email)
}

I was unable to authorize my clients after a successful reply from a social network.
Maybe someone knows what needs to be done, what to transfer / put into the session to authorize the user in the system and redirect the user to the clientarea page?

thanks for the help
 

[Muhammad]

Do you have any update for this ?

[WHMCS John]

Hi there,

The best option depends upon exactly what you want to achieve:

If you need to check the logged in state, then these Methods are available: https://developers.whmcs.com/advanced/authentication/

If you have an app or service that needs to interact with WHMCS on behalf of your users, you should use OAuth: https://developers.whmcs.com/oauth/introduction/

Finally if you want a trusted application or third party to authenticate users into a WHMCS installation automatically, use Single Sign-On:  https://docs.whmcs.com/WHMCS_Single_Sign-On_Developer_Guide