© 2015 X2Engine Inc.

Difference between revisions of "Web API Reference (Legacy)"

From X2Engine
Jump to: navigation, search
Line 1: Line 1:
 
[[Category:Development]]
 
[[Category:Development]]
  
X2CRM features a remote API for inserting, updating, querying and deleting records. The API is accessed via POST requests to the API controller (see: [[x2doc:ApiController|ApiController]]) and thus, URLs (after the domain name and relative path to the [http://httpd.apache.org/docs/2.2/mod/core.html#documentroot document root]) for calls to the API will begin with index.php/api/.
+
X2CRM features a remote API for inserting, updating, querying and deleting records via [[x2doc:ApiController|ApiController]], which (with few exceptions) responds in JSON format. The API can perform these operations with any subclass of X2Model. URLs (after the domain name and relative path to the [http://httpd.apache.org/docs/2.2/mod/core.html#documentroot document root]) for web requests to the API begin with index.php/api/. In most calls to the API, authentication is required in the form of GET or POST parameters <tt>user</tt> and <tt>userKey</tt>, which are the username and API key (respectively) of a user in the CRM.
 +
 
 +
= API Response =
 +
In the case of an error, the API will still respond in JSON format, and will set the HTTP response code according to the following rules
 +
 
  
 
= Usage =
 
= Usage =
 +
In the reference table here, the model class to be used is <tt>Contacts</tt>.
 +
{|class="wikitable" align="center"
 +
|-
 +
! scope="col" | Usage
 +
! scope="col" | Method
 +
! scope="col" | URL
 +
! scope="col" | Authentication
 +
! scope="col" | Query parameters
 +
! scope="col" | Request type(s)
 +
! scope="col" | Expected data
 +
! scope="col" | Response
 +
|-
 +
|Create a new record
 +
|[[x2propdoc:ApiController.html#_actionCreate|actionCreate()]]
 +
|<tt>index.php/api/create/model/Contacts
 +
|Included in post
 +
|n/a
 +
|<tt>POST</tt>
 +
|Form (post) data containing authentication and attributes (key-value) of the model to be created
 +
|<tt>{"model":{<model attributes>},"modelErrors":{<validation errors for each attribute>},
 +
|-
 +
|Search for the first record matching one or more fields
 +
|[[x2propdoc:ApiController.html#_actionLookup|actionLookup()]]
 +
|<tt>index.php/api/lookup/model/Contacts</tt>
 +
|no
 +
|-
 +
|[[x2propdoc:ApiController.html#_actionView|actionView()]]
 +
|<tt>index.php/api/view</tt>
 +
|yes
 +
|Views a record
 +
|-
 +
|[[x2propdoc:ApiController.html#_actionUpdate|actionUpdate()]]
 +
|<tt>index.php/api/update</tt>
 +
|yes
 +
|Updates a record
 +
|-
 +
|[[x2propdoc:ApiController.html#_actionDelete|actionDelete()]]
 +
|<tt>index.php/api/delete</tt>
 +
|yes
 +
|Deletes a record
 +
|-
 +
|[[x2propdoc:ApiController.html#_actionVoip|actionVoip()]]
 +
|<tt>index.php/api/voip</tt>
 +
|no
 +
|Notifies the assignee of a contact having called (if the phone number matches).<br> Requires only the "phone" field, as a GET parameter, it being a 10+ digit phone number.
 +
|-
 +
|}
 +
 +
 +
 
The post data variables should be named according to the column names of the model for which the API being called. When making API calls, the same validation rules as in normal use of the app also apply. In the case that the input does not pass validation, the API will respond with the validation errors.
 
The post data variables should be named according to the column names of the model for which the API being called. When making API calls, the same validation rules as in normal use of the app also apply. In the case that the input does not pass validation, the API will respond with the validation errors.
  

Revision as of 22:15, 6 September 2013


X2CRM features a remote API for inserting, updating, querying and deleting records via ApiController, which (with few exceptions) responds in JSON format. The API can perform these operations with any subclass of X2Model. URLs (after the domain name and relative path to the document root) for web requests to the API begin with index.php/api/. In most calls to the API, authentication is required in the form of GET or POST parameters user and userKey, which are the username and API key (respectively) of a user in the CRM.

API Response

In the case of an error, the API will still respond in JSON format, and will set the HTTP response code according to the following rules


Usage

In the reference table here, the model class to be used is Contacts.

Usage Method URL Authentication Query parameters Request type(s) Expected data Response
Create a new record actionCreate() index.php/api/create/model/Contacts Included in post n/a <tt>POST Form (post) data containing authentication and attributes (key-value) of the model to be created {"model":{<model attributes>},"modelErrors":{<validation errors for each attribute>},
Search for the first record matching one or more fields actionLookup() <tt>index.php/api/lookup/model/Contacts no
actionView() index.php/api/view yes Views a record
actionUpdate() index.php/api/update yes Updates a record
actionDelete() index.php/api/delete yes Deletes a record
actionVoip() index.php/api/voip no Notifies the assignee of a contact having called (if the phone number matches).
Requires only the "phone" field, as a GET parameter, it being a 10+ digit phone number.


The post data variables should be named according to the column names of the model for which the API being called. When making API calls, the same validation rules as in normal use of the app also apply. In the case that the input does not pass validation, the API will respond with the validation errors.

Authenticating

Using the API requires authentication credentials for the web application in the form of two post data fields: user and userKey, containing the username and API key of that user (versions 2.9.1 and later), or authUser and authPassword, containing the username and password hash (versions earlier than 2.9.1), respectively. A user's API key can be set by the administrator in the User module by visiting the update page for the given user.

Available API functions

(See also the documentation on ApiController)

The methods of ApiController used for creating, querying, viewing (by ID), updating and deleting records are:

Method Base URL ID required Usage
actionCreate() index.php/api/create no Creates a new record
actionLookup() index.php/api/lookup no Searches for a record based on one or more fields
actionView() index.php/api/view yes Views a record
actionUpdate() index.php/api/update yes Updates a record
actionDelete() index.php/api/delete yes Deletes a record
actionVoip() index.php/api/voip no Notifies the assignee of a contact having called (if the phone number matches).
Requires only the "phone" field, as a GET parameter, it being a 10+ digit phone number.

Specifying Model

The API requires specifying the model for which the transaction will be performed as a GET parameter with key "model", with actionVoip being the only current exception. Per the URL format rule of X2CRM, which is "path" (see CUrlManager for more information), the full URL of the request will be: index.php/api/[method]/model/[model name]. So, for example, an API call to create a new contact record should use index.php/api/create/model/Contacts

Usage Example

The file leadCapture.php in the web root of the codebase contains a few noteworthy examples of API calls. Of particular significance is the necessity of creating a contact first and then using lookup to obtain its numeric ID in order to create an action associated with that contact.

(section in progress)