Developer forum

Forum » Development » DWAPI Create User

DWAPI Create User

E-mail notifications
Umar Farooq
Reply
Posted on 05/10/2022 12:27:19

Hi

When creating a new user through DWAPI /dwapi/users/create I cant seem to find a way to add password ? do i have to approach it differently?

/umar


Replies

 
Nicolai Pedersen Dynamicweb Employee
Nicolai Pedersen
Posted on 05/10/2022 14:14:56
Reply
This post has been marked as an answer

Hi Umar

Yes, you cannot do that. Neither should you be able to since password security these days is extremely important, so setting a 'known' password is off limits if you want to create secure solutions that will meet security requirements.

So when a user is created, they should receive an email with information about how to set a password (so they will be the only one knowing it). You can only do that currently using the users app on a page - this is missing from the webapi currently and should be added.

Also this is a public api and anyone could create a user and a password if it was open, so it cannot be...

So options for now

  1. Let users set the password on a regular page using recover feature
  2. Use some kind of direct access to the database to create a password, encryptet or not

BR Nicolai

Votes for this answer: 1

 

You must be logged in to post in the forum