Mobile API login
 

I am creating a client using JavaScript for the browser.

I have code that will login a person in using the mobile API. The problem I am running up against is if I log in, refresh, the session isn't persistent. The api_init will create a new session under guest. So, is the way to do this to cache the token and secret and use them across browser refresh? Will that keep me logged in?

I send the call to api_init passing:

api_m = apit_init
clientname = "something"
clientversion = "something"
platformname = "something"
platformversion = "something"
uniqueid = "something unique for the client that gets saved on the client"

I then make a call to login_login passing:

api_m = "login_login"
vb_login_username = "username"
vb_login_password = "password" (will be MD5)
api_sig = "MD5 string"
api_c = "number" (from api_init return)
api_s = "string" (token from api_init return)
api_v = "number" (from api_init return)

And it returns with the response message of "redirect_login" which is great! Then I do another call to api_init to get the updated access token. But it creates a new session for guest so it's not persistant. I try and add api_c to the second api_init call and it says invalid signature so I add the api_sig and then it tells me the same invalid signature so I add the api_s and api_v but still get invalid signature in the second api_init call.

What am I doing wrong? Documentation isn't very descriptive.

The login_login call returns something "dbsessionhash', am I suppose to do something with it? It matches a row in MySQL.

Did you manage to proceed from there? I'm basically stuck at the same point.

Possible solution:
https://vborg.vbsupport.ru/showthread.php?t=289918