Is it possible to create and manage baskets programatically?

[lockhart97]

Laravel: 11.0
Aimeos: 2024.04
PHP: 8.2
Environment: Linux

I have my frontend running on different server, therefore frontend and backend do not share the csrf token. When basket is creared and retrieved they use csrf tokens to track the session. Is it possible to use some other token instead of csrf token for baskets? If not, can baskets be manages using managers and how to track basket session when creating them through managers?

[aimeos]

By frontend, you are referring to a Javascript PWA and by backend to the Aimeos JSON:API?

[lockhart97]

Yes, but the frontend and backend are running on different domains, therefore they cannot share csrf token.
I am serving data through JSON API but aimeos use csrf token to manage baskets. Is there a way to save and get baskets programatically other than JSON API?

Is there any other way to manage baskets other than JSON API?

[aimeos]

Running Aimeos JSON:API and e.g. a NodeJS server for a PWA on different (sub-)domains isn't recommended because this causes the browser to send a CORS request prior to every request to the API domain. That leads to two requests for every query and lowers performance drastically.

Nevertheless, there's no reason why you can't use the Laravel CSRF token in such a setup to manage the basket.

[lockhart97]

What if I remove web middleware from jsonapi endpoint. This removes the need for sending cors request before every API request to backend. However, this leads to another problem, the /basket endpoint requires csrf token to track the basket details over the current session.

So, is there a way to manage basket using some token except csrf which I can send from Nodejs SPA from other domain? I have removed web middleware from jsonapi endpint to suit my needs.

[aimeos]

Removing the "web" middleware group also removes all session handling.

[lockhart97]

ok.. Thanks for response.