How exactly does authentication work?

Cloud
1

I am planning on using curl to call functions on the photon from linux.

I understand that before I can call a function, I need to authenticate using a command like this:

$ curl https://api.particle.io/v1/devices/0123456789abcdef01234567/brew \
     -d access_token=9876987698769876987698769876987698769876

I understand that only after doing this, I can call a function normally like this:

$ curl https://api.particle.io/v1/devices/0123456789abcdef01234567/gong -d arg="ZEN PLEASE" -d access_token=1234

But how does it happen? How does it know who is authenticated and who is not?

Does it store a file on the computer?

2

Ahm, no!?

The access_token parameter in the second command is all you need.
Although it should rather be

$ curl https://api.particle.io/v1/devices/0123456789abcdef01234567/gong -d access_token=<putYourAccessTokenHere> -d "args=ZEN PLEASE"

The first command just looks like the demo call from the dics that’d call an exposed Particle.function("brew", ...) without argument - it hasn’t anything to do with autentication and has no relevance for the subsequent call.

1 Like
3

Oh so It is all in one command. On the cloud documentation it looked like they were separate. Thank You.

Now it makes more sense.

1 Like
4

Hi ScruffR,

I have a created a Product in the console with two devices. One device belongs to my Particle Account, the same account that holds the said Product. I’ve set it as my development device. The other device belongs to a sample customer I created.
Both devices have this firmware that has a particle cloud function "BED"
Now, I called the said function o both devices following this example:

curl https://api.particle.io/v1/devices/0123456789abcdef01234567/gong
-d arg=“ZEN PLEASE”
-d access_token=1234"

and it worked.

Then I tried calling the function using this example:
curl https://api.particle.io/v1/products/:productIdOrSlug/devices/0123456789abcdef01234567/gong
-d arg=“ZEN PLEASE”
-d access_token=1234

But it didn’t work this time. I wonder why. I have edited the sample and filled in the 4-digit productId as seen from the console. I have also used the device ID of each device belonging to my Particle account and my sample customer’s account with their respective access tokens. The access token I’ve used for my Particle account is the one found in Build. The access token I’ve used for the sample customer’s account is an access token I’ve generated for that account.

On the docs, https://docs.particle.io/guide/how-to-build-a-product/authentication/#2-add-oauth-credentials-to-sdk
It says here that: "Without these credentials, calls to POST /v1/orgs/:orgSlug/customers will fail."
So I even tried adding extra arguments on the call:
-d client_id=xxxx
-d client_secret=xxxx
-d username=xxxx@gmali.com
-d password=xxxx

But still, nothing didn’t worked
The reply from the cloud would always be: {“ok”:false,“error”:“Organization not found for user’s role.”}

I looked for answers in the community and got to this thread.
I hope you ave some idea on this problem of mine.

Btw, I am actually making batch files for particle calls that is why I am trying to test out the different curls in the reference for the Cloud API.

Thanks in advance!

Tim

5

I’ll hand this over to @tylercpeacock

1 Like
6

https://api.particle.io/v1/products/:productIdOrSlug/devices/0123456789abcdef01234567/gong

Have you also changed the “gong” part?

7

Yes. I have replaced it with “BED”. Using the access token in my Particle Account,

curl https://api.particle.io/v1/devices/xxxxxxxxxxxxxxxxxxxxx631/BED -d arg=“HEADUP 5500” -d access_token=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx8bd

works. But,

curl https://api.particle.io/v1/products/xxx6/devices/xxxxxxxxxxxxxxxxxxxxx631/BED -d arg=“HEADUP 5500” -d access_token=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx8bd

doesn’t work :frowning:
It says: {“ok”:false,“error”:“Organization not found for user’s role.”}