For anyone interested in how to prep the header manually using JavaScript:

base64Token = Buffer.from(token + ':').toString('base64')

Then the header can be a simple string:

header = `Authorization: Basic ${base64Token}`

This is how I had to do it for Budibase
All the best

I got the solution, sorry to bother
https://beta.groups.io/g/api/message/289

On Wed, Nov 30, 2022 at 07:18 PM, Eric Searcy wrote:

auth=HTTPBasicAuth(str(token), "")

Thank you all for your responses, the above from Eric did the trick, and yes I do prefer to use the token, and need to when using budibase (which I also got working!)

When I was testing HTTPBasicAuth, I was putting None in the second parameter not an empty string!

Thanks again!!

There are two auth modes: cookie or token (our implementation has used both in the past but we have a preference for tokens). Zawiya included "token": "true" in their request which returns a token.

The token should get set as the basic auth username, and there is no basic auth password.

Try passing this as your auth argument. The csrf is NOT required when using token authentication against documented API endpoints; you can remove that from params argument.

auth=HTTPBasicAuth(str(token), "")

-Eric

On Wed, Nov 30, 2022 at 02:28 PM, Zawiya wrote:

So when I login, it works and I get both the csrf_token and the login token from the response.
I just get stuck on how I should formulate the "header" of the request so that the auth works.

On my post requests, I specify the cookies too. Here are a few lines from one of my Python scripts that I use to change member colours if it helps:

def _login():
    print("Logging in to Groups.io...")
    global r
    f = open("groupsio_login.dat", "r")         # Read userid & password from a file
    login_id        = f.readline()
    login_password  = f.readline()
    f.close()
    login_parms = { "email"     : login_id,
                    "password"  : login_password
                  }
    r = requests.get("https://groups.io/api/v1/login",
                 params=login_parms)
    reqD = r.json()
    csrf = reqD['user']['csrf_token']
    return csrf, r.cookies
--
csrf, cookies = _login()                # Login to Groups.io
if not r:
    print('Login failed.', r.status_code, r.reason)
    quit()
--
update_parms = {}
update_parms["group_name"] = group_name
update_parms["csrf"] = csrf
changed_colour = 0

for m in groupMembersL:
        print("**")
        print("Changing colour for", m['full_name'], m['email'], "from", m['color'], "to", memberColoursD[memberStatusD[m['email'].casefold()]])
        update_parms['member_info_id'] = m['id']
        update_parms["color"] = memberColoursD[memberStatusD[m['email'].casefold()]]
        r = requests.post("https://groups.io/api/v1/updatemember",
                           data=update_parms,
                           cookies=cookies)
        if r:
            print('Request successful.')
            changed_colour+=1
        else:
            print('Request failed.', r.status_code, r.reason)
--

Regards
Andy

Hi thanks for this, I just learned that today also, however I'm stumped on how to get auth working for python.
I'm logging in, getting the csrf_token and the login token, but the next request I call e.g. "send invite" is failing with unauthorized.

Is there any guidance you can provide?

Omar

Hi, thanks for this amazing product and opening up an api to it.

I'm using a tool called budibase to allow people to fill in a form and I'd like to add the ability for me to invite them to a group using the API.

I couldn't get it authorizing so I tried a python script and still can't get it going:

from pprint import pprint
import requests
from requests.auth import HTTPBasicAuth

response = requests.post(
    'https://groups.io/api/v1/login',
    params={
        "email": "<email>",
        "password": "<password>",
        "token": "true"
    }
)

response_json = response.json()

token = response_json.get('token')
csrf_token = response_json.get('user').get('csrf_token')

print(token, csrf_token, sep="\n")

response = requests.post(
    "https://groups.io/api/v1/invite",
    params={
        "group_name": "<group-name>",
        "emails": "<emails>",
        "csrf": csrf_token
    },
    auth=HTTPBasicAuth("<email>", f"{token}")
    # headers={'Authorization': f"Basic {token}"}

)
response_json = response.json()
pprint(response_json)

So when I login, it works and I get both the csrf_token and the login token from the response.
I just get stuck on how I should formulate the "header" of the request so that the auth works.

I tried:
Authorization: Basic <token>

But that's not working.

Thanks for your time and apologies if this has been answered over and over, I did a search and I only found references to curl, and .NET, but neither helped me figure this out.

Omar

Hi All,

I've just pushed preliminary support for setting/updating extra member data via the /updatemember endpoint. I've also updated the API docs, It currently does not support setting/updating image columns.

Please let me know if you have any questions or suggestions for how to improve it (especially the docs; it's kind of complicated).

Thanks,
Mark

Hi Mark,

when I call the getactivitylog endpoint with a subgroup name as the group_name parameter I get the following response:

{"object":"error","type":"bad_request","extra":"not a parent group"}

Is there a reason why this endpoint seems to be restricted to main groups?

Regards
Andy

Hi Mark,

the 'today' value for the restrict_date parameter on the getactivitylog endpoint actually returns entries from the last 24 hours. The filter on the website was changed from 'today' to 'past 24 hours' to be more precise (see #80681206). Can the API be changed from 'today' to 'last_24_hours' to be more precise and match the naming convention of other possible values such as 'last_week' and 'last_30_days'?

Thanks
Andy

Hi Mark,

are there any endpoints to add, update & delete events in the pipleline? I was looking to write a script that would allow me to copy/move events from one group to another to save typing and copying and pasting text.

Regards
Andy

On Mon, Jun 13, 2022 at 08:45 PM, Mark Fletcher wrote:

you're specifying the parameters as part of the URL

Yes, I had the POST with params= when it should have been data=.  It's working now and I get the expected entries on the activity log.

Thanks,
Andy

Hi Mark,

following on from my last message about membership colours, I've been reading the API documentation and creating a Python script to use it. I can retrieve member details but am failing to update them. A call to the updatemember endpoint returns a 200 code though so I am not sure why it does not work. The member info object returned after the post to the updatemember endpoint shows the same details that were initially retrieved.

The following debug output from my script shows the calls made and parameters used. (some details redacted):

Getting member details...
https://groups.io/api/v1/getmember?member_info_id=1nnnn194&group_name=xxxx%2Btest
Response code: 200
Request is successful.
Current member details...
Id: 1nnnn194
Full Name: Andy Wedge (G)
Email: axxxxxxxxx@...
Color: color_green_lantern
Postng member details...
https://groups.io/api/v1/updatemember?member_info_id=1nnnn194&group_name=xxxx%2Btest&csrf=7nnnnnnnnnnnnnnnnn6&color=color_mustard
Response code: 200
Request is successful.
Updated member details...
Id: 1nnnn194
Full Name: Andy Wedge (G)
Email: axxxxxxxxnx@...
Color: color_green_lantern

What am I missing?

If the call was successful and an update was made, I would have expected to see something on the activity log but there is nothing there.

Thanks
Andy

Hi,

We are developing an integration between Wordpress and groups.io where we have an existing, live group. I don't want to develop and test against the live group (obviously). So the questions are:

1. Does the API work with a free group?
2. If it does, is the functionality limited to that for a free group (e.g. no ability to Direct Add)?
3. If the API functionality is restricted for a free group does anyone have any suggestions for how best to do development/testing without having to create a new paid account?

I realise I can simply create another paid account but I work for a very small organisation where every expenditure is carefully scrutinised!

Thanks,

Richard

P.S. apologies if you got a previous version of this enquiry with a tag - I haven't used tags before so didn't realise what I needed to do...

Hi All,

I have changed how we handle colors internally. Where this will be seen is in the API and in any exported JSON files (when you export a group or a database table).

Previously, color names in the API and through exported JSON files started with either tag_ or column_color_. Now all color names just start with color_.

If you have a JSON database table export that you wish to re-import at some point, simply doing a search/replace on the color names will ensure that the proper colors are imported.

Please let me know if you have any questions.

Thanks,
Mark

--