Generating a login email via API

Falco · August 10, 2022, 5:42pm

That endpoint is not available for API calls at the moment indeed. When you pass API keys for it you fall on the redirect here:

github.com

discourse/discourse/blob/2e2fee9da3af7898d38e5a8797d5930d6c26fc03/app/controllers/users_controller.rb#L950


      
            end
          
            render layout: 'no_ember'
          rescue RateLimiter::LimitExceeded
            @message = I18n.t("rate_limiter.slow_down")
            render layout: 'no_ember'
          end
          
          def email_login
            raise Discourse::NotFound if !SiteSetting.enable_local_logins_via_email
            return redirect_to path("/") if current_user
          
            expires_now
            params.require(:login)
          
            RateLimiter.new(nil, "email-login-hour-#{request.remote_ip}", 6, 1.hour).performed!
            RateLimiter.new(nil, "email-login-min-#{request.remote_ip}", 3, 1.minute).performed!
            user = User.human_users.find_by_username_or_email(params[:login])
            user_presence = user.present? && !user.staged
          
            if user

And you can’t call it without API keys because this route is under the :verify_authenticity_token CSRF protection.

Topic		Replies	Views
Allow API use by regular users, not just admins dev rest-api	7	994	April 29, 2023
Possible to send an email login link via API? support	6	1871	August 26, 2021
First time login for a user using API KEY sso openid-connect , rest-api	2	1127	December 23, 2022
Sign-up and Login via custom API - Will it work properly? dev rest-api	1	613	October 11, 2020
Discourse REST API Documentation Developer Guides rest-api , reference	0	124583	December 1, 2014

Generating a login email via API

Related Topics