www.it-ebooks.info

The Magento API
• Consumer Key: This is a unique value used to identify a user with Magento.
• Consumer Secret: This is a secret used by the customer to guarantee the
ownership of the consumer key. This value is never passed in the request.
• Request Token: This value is used by the consumer (application) to obtain
authorization from the user to access the API resources.
• Access Token: This is returned in exchange of the request token and on
successful authentication.
Let's proceed to register our application by going to System | Web Services |
REST - OAuth Consumers and selecting Add New in the Admin panel:
One important thing to notice is that a callback URL must be
defined, to which the user will be redirected after successfully
authorizing the application.
Our first step is to learn how to get this session token ID on each of the available
API protocols.
To get session token ID in XML-RPC, we need to execute the following code:
$apiUser = 'username';
$apiKey = 'password';
$client = new Zend_XmlRpc_Client('http://ourhost.com/api/xmlrpc/');
// We authenticate ourselves and get a session token id
$sessionId = $client->call('login', array($apiUser, $apiKey));
[ 170 ]
www.it-ebooks.info