Dian schreef:

Hi all, I am trying to create a new layer for the MW API which allows access over SOAP. I plan to support some often used functions like: *login / logout *create / delete a page *read / update a page *move a page For each function I create a query and execute it using the created ApiMain object.

When requesting an action the user should send the cookies (and the different tokens). In order to execute the action with proper user credentials set, I need to set the right cookies.

Which is the best way to set the cookies in the wiki when communicating directly over ApiMain?

You don't need to. When called in internal mode (i.e. with ApiMain and FauxRequest) the API will automatically use the user credentials of the caller. If your clients pass their login cookies to your extension, MediaWiki's startup code will do all the required magic.

Roan Kattouw (Catrope)

Dian schreef:

Thanks for the fast reply! But suppose the user just sends a serialized object containing the cookie-data , i.e. the HTTP headers doesn't include the cookies. How can I manage to set the cookies in the system after deserializing them from the XML of the SOAP message?

It's kind of hacky, but it seems there's no clean way to do it. There should be no scary side-effects AFAICT.

$_SESSION['wsUserId'] = $userid; $_SESSION['wsUserName'] = $username; $_SESSION['wsToken'] = $token;

global $wgUser; $wgUser = User::newFromSession();

Roan Kattouw (Catrope)