Can you please give more details ? Would the service "Resources["EncryptionServices"].EncryptPropertyValue(params);" be useful to compare password ? (How to set an attribute with type PASSWORD ?).

I have some use-cases which would need to validate manually username and password, instead of using the FormLogin page. One of the use-cases is one common login for an organization, then users will only chose his name from a users list and validate to continue.

P

ptc-6292103

1-Visitor

Here's how I do it.

I have a admin user with an app key ("appkeyap-pkey-appk-eyap-pkeyappkeyap"). Then, I have a service which takes a username and an unencrypted password, and returns a boolean. This service retrieves the user record via REST API, encrypts the incoming password, and compares it to the stored password.


var result = false;
var appKey = "appkeyap-pkey-appk-eyap-pkeyappkeyap";
if(username && Users[username]) try
{
  var exportUrl = "http://127.0.0.1:8080/Thingworx/Users/"+username+"?appKey="+appKey+"&Accept=application/json";
  var user = Resources.ContentLoaderFunctions.LoadJSON({ url : exportUrl });
  var correct = user.password;
  result = encryptString(password||"") === correct;
} catch (_) {/* don't care */}

This code was written a long time ago, and at the time, the password hash was only available on the exported User record (via REST API); you might need to adjust settings for the REST API to use this.