• Replies 4 replies
  • Subscribers 0 subscribers
  • Views 21 views
  • Users 0 members are here
Options
3sides - Social sharing widget
Related

Call Update User API return OK but value not updated.

Ha Nguyen Danh
27215

hi everyone,

I call an API which is used to update an existing user in the system Update User API :  https://<highqinstance_name>/api/13/users/194 

Here's the request payload:

{  "lastlogindate": "30 Nov 2022 04:01",  "invalidlogins": "0",  "org": "3",  "sites": {    "sitecount": 1,    "site": [      {        "id": 48,        "sitename": "NashTech Dev Site 3"      }

 

After that, I check the data using the Get User API : https://<highqinstance_name>/api/13/users/194?type=id 

But the field 'lastlogindate' doesn't match the value that I updated before:

 

I need to know the details of usage of this API. In case this is a bug is there another API that I can use?

Thanks you.

]]>
Parents

  • Ha Nguyen Danh, things like:

    • userid
    • invitationsent
    • createdby
    • createddate
    • modifiedby
    • modifieddate
    • lastlogindate
    • invalidlogins
    • resetpassworddate
    • followingcount
    • followercount

    are all implicitly read-only. They are operationally set by the system, based on certain actions. Only the system can update lastlogindate and invalidatelogins in response to the user logging in, and entering an invalid password more than 3 times.

    In Computer Science parlance, these are often call derived attributes, as they are commonly "calculated" properties of an object.

    Question is why are you trying to spoof when the user logged in? As a would-be hacker, this feature would be marvellous - in covering my tracks!

Reply

  • Ha Nguyen Danh, things like:

    • userid
    • invitationsent
    • createdby
    • createddate
    • modifiedby
    • modifieddate
    • lastlogindate
    • invalidlogins
    • resetpassworddate
    • followingcount
    • followercount

    are all implicitly read-only. They are operationally set by the system, based on certain actions. Only the system can update lastlogindate and invalidatelogins in response to the user logging in, and entering an invalid password more than 3 times.

    In Computer Science parlance, these are often call derived attributes, as they are commonly "calculated" properties of an object.

    Question is why are you trying to spoof when the user logged in? As a would-be hacker, this feature would be marvellous - in covering my tracks!

Children
No Data