RESTful API Header
Hello, using RESTful API a temporary token is returned and logged with console.log(xmlHttp.responseText); . Does anyone know how to then pass that temporary token to the 'Authorization': '{Authoriz...
Forum Discussion
I do not have time to fully test this right now but I will later if this does not make it work for you. Those errors are because you try and initialize that variable multiple times.
You set it as a const on line 62 and then also set it as const on line 99. I believe if you remove the const on line 99 it should work.
There is a second part to this though. When you set a variable as const you are saying it should not be allowed to be changed, kind of(it gets complicated.) So when you set it initially at line 62 that is fine. When you try and re-assign the variable later on it is blocked because it is a const.
If you set the first variable to be var instead of const (and then remove the const from line 99 still) that may work. Like I said I will try and actually test this tomorrow or possibly later today when I get a chance.
You set it as a const on line 62 and then also set it as const on line 99. I believe if you remove the const on line 99 it should work.
There is a second part to this though. When you set a variable as const you are saying it should not be allowed to be changed, kind of(it gets complicated.) So when you set it initially at line 62 that is fine. When you try and re-assign the variable later on it is blocked because it is a const.
If you set the first variable to be var instead of const (and then remove the const from line 99 still) that may work. Like I said I will try and actually test this tomorrow or possibly later today when I get a chance.
Thanks for looking at this when you have time. I just defined two separate constants xmlHttp1 & xmlHttp2. The issue is trying to use the ticket outside of the function. I added a check before trying to pass to the next script block and the ticket is undefined outside of the function; the query executes, but does not have authorization:
------------------------------
Adam Keever
------------------------------
<!---------------GET_TEMPORARY_TOKEN---------------------->
<script>
var ticket;
var tempAuth;
var headers = {
'QB-Realm-Hostname': '[MY REALM]',
'QB-App-Token': '[MY APP TOKEN]',
'Content-Type': 'application/json'
}
const xmlHttp1 = new XMLHttpRequest();
xmlHttp1.open('GET', 'https://api.quickbase.com/v1/auth/temporary/[MY TABLE ID]', true);
for (const key in headers) {
xmlHttp1.setRequestHeader(key, headers[key]);
}
xmlHttp1.onreadystatechange = function() {
if (xmlHttp1.readyState === XMLHttpRequest.DONE) {
console.log(xmlHttp1.responseText);
document.getElementById("AUTH#").innerHTML = xmlHttp1.responseText;
ticket = JSON.parse(xmlHttp1.responseText);
document.getElementById("VAR#").innerHTML = ticket.temporaryAuthorization;
}
};
xmlHttp1.withCredentials = true;
xmlHttp1.send();
ticket1 = xmlHttp1.onreadystatechange("xmlHttp1.responseText");
console.log(xmlHttp1.responseText);
tempAuth = "QB-TEMP-TOKEN " + ticket1;
document.getElementById("CHK#").innerHTML = tempAuth;
</script>------------------------------
Adam Keever
------------------------------
- Austin and @Brad Lemke, check out these examples by @Ryan Pflederer:
Quick Base Code Page Samples
------------------------------
Adam Keever
------------------------------ - Oh yeah, I've already taken a few snippets from the 'Check/Pause/Refresh' example (specifically the act of pre-naming the next destination using '&url=') and then prototyped out a series of workflows from it. It's a pretty powerful toolset.
------------------------------
Brad Lemke
------------------------------ - I thought this was a scope issue and it may have been at first before some changes I made but this appears to be an issue with the asynchronous calls here. I believe what is happening is after the first xmlHttp request happens and is returned it has already fired the second one as well, so the tempAuth is actually undefined at that time but it gets defined not long after that.
The way you can tell this is happening is to load the code page(or however you call this) and then after it loads and errors hit F12 - in chrome - and manually type tempAuth, you'll see that it is indeed correct with the token there and everything.
You will need to nest the xmlHttp calls together or utilize promises so that things are done in a certain order and not all at once. - I've been following this thread and bashing my face against this brick wall all day. I've been seeing something similar to you Austin.
So, just for kicks, I changed
xmlHttp1.open('GET', 'https://api.quickbase.com/v1/auth/temporary/[MY TABLEID]', true false);
This made it run in synchronous mode, and now my query went straight through like it was supposed to when I set the query's header to 'Authorization': 'QB-TEMP-TOKEN ' + ticket.temporaryAuthorization,
------------------------------
Brad Lemke
------------------------------ - This is my experience in general when trying to slap together a bunch of code examples, it is so hard to debug. This was driving me crazy too because it seemed like it should be working. That's why I had to actually try testing it today to see what was going on.
I should have looked at the xmlHttp command closer. Switching that to false does make that into a synchronous call which should make it all work. From everything I see online this is technically bad practice because it can cause a wait for the user but in this case I don't think it would really matter. I bet it never even causes a problem in this case, there isn;t anything major going on and I don't expect Quickbase to not answer an api call.
Thanks for posting that Brad. - I'm not sure why, but I made these changes and it had no effect.
------------------------------
Adam Keever
------------------------------ - Below is my full code page. I've gotten the query to fire off consistently to the point where I was able to go back and polish the readability just for my own sake since i'm learning all of this on the fly. I'm currently stuck at the point of pulling anything useful out of the query, the UQ step. I'm betting you probably know where to go from here though.
<!DOCTYPE HTML>
<head>
<meta charset="UTF-8" name="description" content="[MY CONTENT]">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="theme-color" content="#3367D6" />
<title>View Data</title>
<!-- put styling information here -->
</head>
<body>
<!-- This is just to confirm code functionality -->
<h1>Cleartext Authorization</h1>
<span id="CA#"></span>
<h1>Parsed Authorization</h1>
<span id="PA#"></span>
<h1>Usable Authorization</h1>
<span id="UA#"></span>
<h1>Cleartext Query Results</h1>
<span id="CQ#"></span>
<h1>Parsed Query Results</h1>
<span id="PQ#"></span>
<h1>Usable Query Results</h1>
<span id="UQ#"></span>
<script>
<!--SET GLOBAL HEADERS--->
var REALM = 'X'
var APPTOKEN = 'Y'
var TAUTHTABLEID = 'Z'
<!--BEGIN AUTHORIZATION REQUEST--->
var headers1 = {
'QB-Realm-Hostname': REALM,
'QB-App-Token': APPTOKEN,
'Content-Type': 'application/json'
}
const xmlHttp1 = new XMLHttpRequest();
xmlHttp1.open('GET', 'https://api.quickbase.com/v1/auth/temporary/'+ TAUTHTABLEID, true);
for (const key in headers1) {
xmlHttp1.setRequestHeader(key, headers1[key]);
}
xmlHttp1.onreadystatechange = function() {
if (xmlHttp1.readyState === XMLHttpRequest.DONE) {
console.log(xmlHttp1.responseText);
CA = xmlHttp1.responseText;
document.getElementById("CA#").innerHTML = CA;
PA = JSON.parse(CA);
document.getElementById("PA#").innerHTML = PA;
UA = PA.temporaryAuthorization
document.getElementById("UA#").innerHTML = UA;
<!--END AUTHORIZATION REQUEST, BEGIN QUERY--->
var headers2 = {
'QB-Realm-Hostname': REALM,
'Authorization': 'QB-TEMP-TOKEN ' + UA,
'Content-Type': 'application/json'
}
var body = {
"from": TAUTHTABLEID,
"select":[31],
"where":"{7.TV.'_curuser_'}"
}
const xmlHttp2 = new XMLHttpRequest();
xmlHttp2.open('POST', 'https://api.quickbase.com/v1/records/query', true);
for (const key in headers2) {
xmlHttp2.setRequestHeader(key, headers2[key]);
}
xmlHttp2.onreadystatechange = function() {
if (xmlHttp2.readyState === XMLHttpRequest.DONE) {
console.log(xmlHttp2.responseText);
CQ = xmlHttp2.responseText;
document.getElementById("CQ#").innerHTML = CQ;
PQ = JSON.parse(CQ);
document.getElementById("PQ#").innerHTML = PQ;
UQ = PQ.data.id <!---I have no idea how to pull the data from this parsed query result--->
document.getElementById("UQ#").innerHTML = UQ;
}
}
xmlHttp2.send(JSON.stringify(body));
}
}
xmlHttp1.withCredentials = true;
xmlHttp1.send();
</script>
</body>
</html>
------------------------------
Brad Lemke
------------------------------ <script> var getUrlParameter = function(sParam) { var sPageURL = window.location.search.substring(1); var sURLVariables = sPageURL.split('&'); for (var i = 0; i < sURLVariables.length; i++) { var sParameterName = sURLVariables.split('='); if (sParameterName[0] == sParam) { return sParameterName[1]; } } } rid = getUrlParameter("rid"); console.log(rid); document.getElementById("RID#").innerHTML = rid; <!---------------GET_TEMPORARY_TOKEN----------------------> var appToken = '' var realm = '' // demo.quickbase.com var dbid = '' // table you want to query var ticket = '' var tempAuth = '' var headers = { 'QB-Realm-Hostname': realm, 'QB-App-Token': appToken, 'Content-Type': 'application/json' } const xmlHttp = new XMLHttpRequest(); xmlHttp.open('GET', 'https://api.quickbase.com/v1/auth/temporary/' + dbid, false); for (const key in headers) { xmlHttp.setRequestHeader(key, headers[key]); } xmlHttp.onreadystatechange = function() { if (xmlHttp.readyState === XMLHttpRequest.DONE) { console.log(xmlHttp.responseText); document.getElementById("AUTH#").innerHTML = xmlHttp.responseText; ticket = JSON.parse(xmlHttp.responseText); document.getElementById("VAR#").innerHTML = ticket.temporaryAuthorization; tempAuth = "QB-TEMP-TOKEN " + ticket.temporaryAuthorization; } }; xmlHttp.withCredentials = true; xmlHttp.send(); //tempAuth = "QB-TEMP-TOKEN " + ticket.temporaryAuthorization <!---------------GET_DATA_FROM_FIELDS----------------------> document.getElementById("PASS#").innerHTML = tempAuth; headers = { 'QB-Realm-Hostname': realm, 'Authorization': tempAuth, 'Content-Type': 'application/json' } var body = { "from": dbid, "select": [237, 229, 253, 277, 313, 334, 254, 278, 314, 335, 255, 279, 315, 336, 256, 280, 316, 337, 257, 281, 317, 338, 258, 282, 318, 339, 259, 283, 319, 340, 260, 284, 320, 341, 261, 285, 321, 342, 262, 286, 322, 343, 263, 287, 323, 344, 264, 288, 324, 345, 265, 289, 325, 346, 266, 290, 326, 347, 267, 291, 327, 348, 268, 292, 328, 349, 269, 293, 329, 350, 270, 294, 330, 351, 271, 295, 331, 352, 272, 296, 332, 353, 273, 297, 333, 354, 274, 362, 372, 382, 275, 363, 373, 383, 432], "where": "{3.EX." + rid + "}" } const xmlHttp2 = new XMLHttpRequest(); xmlHttp2.open('POST', 'https://api.quickbase.com/v1/records/query', false); for (const key in headers) { xmlHttp2.setRequestHeader(key, headers[key]); } xmlHttp2.onreadystatechange = function() { if (xmlHttp2.readyState === XMLHttpRequest.DONE) { console.log(xmlHttp2.responseText); document.getElementById("Q#").innerHTML = xmlHttp2.responseText; } }; xmlHttp2.send(JSON.stringify(body)); </script>There were other changes that needed to be done as well I think. I made so many little changes here and there. Some may not have been needed because in the end it was just the 2 lines that were running async when it was better they were synced.
You can try that and compare it to what you have and see the changes and also make sure it works. Brad might even have a better one set up. I see we both posted at the same time lol.- Austin, I'd actually been working on getting it to work without setting it to synchronous mode (the 'false' setting). The one I just posted works with it set to True, which is nice since it's not a 'deprecated' function now.
------------------------------
Brad Lemke
------------------------------ - This has been great collaboration, thanks Austin and Brad. I am on the same page with you now Brad and have the returned query, but not sure how to push the record data into HTML. Also I queried to return specific fields based on a record ID and it returned the field ID, the field label and the field type, but not the data for the record. Do you know how to get the data of specific fields for a specific record?
------------------------------
Adam Keever
------------------------------ - Yes, actually I did finally figure that last step out for my specific scenario where I know the query is going to only ever return one record - and I only need data from one field [31] from that one record. Here's the new Query section of the script:
<!--END AUTHORIZATION REQUEST, BEGIN QUERY--->
var headers2 = {
'QB-Realm-Hostname': REALM,
'Authorization': 'QB-TEMP-TOKEN ' + UA,
'Content-Type': 'application/json'
}
var body = {
"from": TAUTHTABLEID,
"select":[31],
"where":"{7.TV.'_curuser_'}"
}
const xmlHttp2 = new XMLHttpRequest();
xmlHttp2.open('POST', 'https://api.quickbase.com/v1/records/query', true);
for (const key in headers2) {
xmlHttp2.setRequestHeader(key, headers2[key]);
}
xmlHttp2.onreadystatechange = function() {
if (xmlHttp2.readyState === XMLHttpRequest.DONE) {
console.log(xmlHttp2.responseText);
CQ = xmlHttp2.responseText;
PQ = JSON.parse(CQ);
UQ = PQ.data[0][31].value;
<!--END QUERY, BEGIN REDIRECT--->
------------------------------
Brad Lemke
------------------------------ - Wait, how are you getting data for a specific record? I was using:
"where":"{3.EX.' + rid + '}"in order to get data for a specific record ID.
------------------------------
Adam Keever
------------------------------ - I had a syntax error that @Nick Wade helped me identify and correct. I have a button on all records that fires a code page and this code will get the record ID:
var getUrlParameter = function(sParam) { var sPageURL = window.location.search.substring(1); var sURLVariables = sPageURL.split('&'); for (var i = 0; i < sURLVariables.length; i++) { var sParameterName = sURLVariables.split('='); if (sParameterName[0] == sParam) { return sParameterName[1]; } } } rid = getUrlParameter("rid"); console.log(rid); document.getElementById("RID#").innerHTML = rid;
Then using Brad's example and this query body returns the data for the field array for that specific record:
var body = { "from": TAUTHTABLEID, "select":[FID1, FID2, etc...], "where":`{'3'.EX.'${rid}'}` }
------------------------------
Adam Keever
------------------------------ - Ah good to hear you got it worked out! To answer your question though:
I treat the "where": '{query filter}' like I would any kind of query filter, including the ability to stack filters using if/and/or parameters, and so I can find neat ways to ensure only one record comes back from the query. I actually built my tool/code page here to get the record ID of a record that I just created, meaning I don't actually know the RID when I enter the code page. This query is built to look at the most recent RID generated by the 'current user' running the page, hence the necessity for a Temporary Authorization token as opposed to a permanent User Token.
So my workflow now is to create a new record using the api_genaddrecordform with a "&NextURL=" & [mycodepage] tacked onto the end of it, and then click on the native 'save & close' to continue to the codepage and pull the RID of the record I just made, then immediately go to another api_genaddrecordform in the child table with that new record ID dumped into the 'related parent ID' field.
It only removes like, one click from the existing process, but this capability unlocks a whole new world of process optimizations and UI improvements.
------------------------------
Brad Lemke
------------------------------ - I like your logic and mode of thought. Thanks again for sharing your knowledge.
------------------------------
Adam Keever
------------------------------
