Opening the add-on

Request body (Iframe / redirect link)

token
string
Online shop ID
current_admin_language
enum
Administration language according to ISO 639-1

cs
Czech
string
sk
Slovak
string
en
English
string
version
time
string
Validity time of signature_v2 according to ISO 8601
signature
string
Old verification method - valid until 12/2024 - DO NOT USE
signature_v2
string
base64_encode signature of the specified attributes using the private key.
You will need to know the signature_token to create it.
POST https://vasedomena.com/vášAPIEndointProZískáníIframe JSON

{
"token": "" ,
"current_admin_language": "cs" ,
"version": "",
"time": "",
"signature": "",
"signature_v2": ""
}
                                        

Response body

url
string
including SSL
type
enum

iframe
string
redirect
redirects to the URL you specify, e.g. automatically logs into your IS.
string
{} Response JSON

{
"url": "" ,
"type": "iframe"
}
                                            

Signature pattern:

{} Signature PHP

<?php

$data = implode(";", [
"token" => "...",
]);
$signature_v2 = 'a0e0a3e7689bd4c80e4d6ffcccb05235b864e1d0';
$signaturePublicKey = file_get_contents("https://files.upgates.com/addons/signature/api.signature.pub.key");
$verify = openssl_verify($data, base64_decode($signature_v2), $signaturePublicKey, OPENSSL_ALGO_SHA256);
{} Signature_v2 PHP

<?php

$data = implode(";", [
    "token" => "...",
    "time" => "...",
    "signature_token" => "...",
    ]);
$signature_v2 = 'a0e0a3e7689bd4c80e4d6ffcccb05235b864e1d0';
$signaturePublicKey = file_get_contents("https://files.upgates.com/addons/signature/api.signature.pub.key");
$verify = openssl_verify($data, base64_decode($signature_v2), $signaturePublicKey, OPENSSL_ALGO_SHA256);
            
        

Add-on not available

  • Any response other than HTTP status code 200.
  • The HTTP 200 response is not valid.

Iframe

  • We need to get as close to the Upgates administration styles as possible. More here.
  • There will be no communication between the iframe and the Upgates administration.

Answer (Validation)

  • cURL supported content encoding
    • libcurl
    • deflate
    • gzip
    • br
    • zstd
Next article
Deactivating an add-on