On our Ionic Apps:
- We use the Login/Password to get an appKey (automatically created upon request) and never store the Login/Password credentials on the device, just the temporal appKey "token"
- After that we do the Rest API calls with the previous token/appKey
We have an old one done with Ionic 1 and the new one that we are developing with Ionic 4, here it's a sample of the API call in order to get the appKey:
login(username: string,password: string) {
var apiURL:string = "/Thingworx/Things/wupAppAuthenticatorHelpers/Services/GetAppKey_wupAppAuthenticatorTS";
var encodedData = window.btoa(username + ":" + password);
let headers = new HttpHeaders({
'Content-Type': 'application/json',
'Accept': 'application/json',
'Authorization': 'Basic '+encodedData,
'Cache-Control': 'no-cache'
});
let httpOptions = { headers: headers /*, withCredentials: true */ };
var content = JSON.stringify({ "context": this.conf.getAppContext() });
this.http.post<any>(apiURL, content,httpOptions)
.subscribe(
res => {
this.handleLoginResult(res);
},
err => {
this.handleLoginError(err);
}
);
}
Where "wupAppAuthenticatorHelpers/Services/GetAppKey_wupAppAuthenticatorTS" it's a helper thing/service that generates the appKey.
Then the rest of calls should be something like:
let apiURL = "DesiredTWAPIEndPoint";
let headers = new HttpHeaders({
'Content-Type': 'application/json',
'Accept': 'application/json',
'x-thingworx-session': 'true',
'appKey': previouslyAppKeyReceived
});
let httpOptions = { headers: headers };
var content = JSON.stringify({ yourJsonContent });
this.http.post<any>(apiURL, content,httpOptions) .subscribe(
res => { this.handleResult(res); },
err => { this.handleError(err); }
);
