Hi I am integrating rest suitetalk with python So...
# general
r
Hi I am integrating rest suitetalk with python So I want create login and forget password functionality by calling netsuite api How can I do that ?
s
What are you trying to accomplish, exactly? Are you concerned about the credentials used by the application for authenticating to SuiteTalk? If so, you’d be better off using Token-based authentication, as user credentials are expected to be deprecated and eventually no longer an option, for authenticating to web services and restlets. Best to make the switch now. As for login and forget password capabilities for users, they are already built into NetSuite. What is the goal of replicating them?
r
We are creating a system which have users and users will be stored as customers so we need to create functionality for customers to signup, login
s
NetSuite is unlikely to offer APIs to support that as it would compete directly with their own Customer Center offering. They have two levels of Customer Center: regular and Premium, which basically offer customers the ability to log in and view data and pages that you want exposed to them through your NetSuite account.
đź’Ż 1
r
We are building an mobile app and it is not interacting directly with netsuite and we are routing our server requests to suitetalk REST API
s
I am confused. You say it is not interacting directly with NetSuite, but you are routing server requests to SuiteTalk. What role is NetSuite playing in your mobile app then? Are you just trying to use NetSuite as a user authentication service, storing usernames and password on the customer records? It’s not really designed for that, and I’;m not sure why you wouldn’t just host your own authentication service instead, as you’d have much more control of it, better performance, and fewer limitations.
Another problem is that if you are using SuiteTalk, I don’t see any way you’d be able to securely send the password, as you would have to send the password in the SOAP message itself. Even though it can be sent via HTTPS, anyone with permissions to see the web services requests would be able to see the passwords, unless you were encrypting or hashing them first.