magento_remote 0.2.3 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: abce27b2504c667c77150db6dde7d872f1406a8f
-  data.tar.gz: a0ba4c28ca36edfd8ad349f94fa50ef8c89e45e0
+  metadata.gz: 25e48a3c4c2d32aa637c541ef48cd02a9f649b96
+  data.tar.gz: 54fb6b0a3365a1ad50c5a881e9ba062d64b51f95
 SHA512:
-  metadata.gz: 565e069bca28c75ae6179a843a2ef8220b3524c8a952775da24fd5543e7b5d97d6b4de37780a3aca342cd78c5da8c9b8dfd0539aa1dfd89cc548c3e58a038573
-  data.tar.gz: f459b1e4bdb19df64d9a9a37563f0ab8228f868ade07f80daecc752e66f9e3cf5f984016d1c5d8eac203aba085c309e00d904f2664e8662dd8706483941f4ea3
+  metadata.gz: 11a3b8a1c7949e820df26bc03c056762b3f0debc99ca0914868883393e55fd6a61253cf4a97b16205b69f043817b85812e488bbf9d194245ba0e0a91d781f225
+  data.tar.gz: 80f4368b469dc9455d3a3670f5d7994f3d1cf111e776083502e91122b1330cfc7dab9e892b95a3e5304646e6b4806c769745f6ebeae6d779cf386ebd985e0522

data/README.md

@@ -22,7 +22,7 @@ Call
 
     magento_add_to_cart -u customerlogin -p customerpassword -b https://theshop -w productid -q quantity -c
 
-to put *quantity* of the product with *productid* in your shopping cart.
+to put *quantity* of the product with *productid* in your shopping cart (read about form token parameter further down, if working with 'hardened' magento versions, or magento >= 1.8).
 
     magento_find_product -b https://theshop -s isearchforthisword
 
@@ -32,6 +32,8 @@ to display a table of matching products.
 
 to display *limit* number of products, starting with product id of *startpid*.
 
+The form_token for add_to_cart functionality is necessary for specially 'hardened' magento instances, or magento versions >= 1.8 .  You find it encoded in the URL of any form action that deals with cart additions.  It was only tested for 'ajax' cart actions.
+
 Note that all scripts show you information about possible parameters when invoked with `--help`.
 
 Note that you should work with

data/bin/magento_add_to_cart

@@ -23,6 +23,9 @@ optparse = OptionParser.new do |opts|
   opts.on('-b', '--base-uri URI', 'base URI of shop.') do |b|
     options[:base_uri] = b
   end
+  opts.on('-f', '--form-token FORM_TOKEN', 'base-64 encoded URL to be used as form token (magento >= 1.8).') do |f|
+    options[:form_token] = f
+  end
 
   opts.separator ""
   opts.separator "Product options"
@@ -71,6 +74,8 @@ optparse.parse!
 
 if !options[:user] || !options[:pass] || !options[:base_uri]
   STDERR.puts "Error: You have to define user, pass and base_uri"
+  puts
+  puts optparse
   exit 1
 end
 
@@ -97,7 +102,7 @@ return_code = 0
 mech.login
 
 if options[:amap]
-  qty = mech.add_to_cart! options[:product_id], options[:quantity]
+  qty = mech.add_to_cart! options[:product_id], options[:quantity], options[:form_token]
   if qty == options[:quantity].to_i
     puts "INFO: Succeeded in adding to cart"
   elsif qty > 0
@@ -107,7 +112,7 @@ if options[:amap]
     return_code = 4
   end
 else
-  if mech.add_to_cart options[:product_id], options[:quantity]
+  if mech.add_to_cart options[:product_id], options[:quantity], options[:form_token]
     puts "INFO: Succeeded in adding to cart"
   else
     STDERR.puts "ERROR: Something went wrong."

data/lib/magento_remote/magento_mech.rb

@@ -1,5 +1,6 @@
 require 'mechanize'
 require 'logger'
+require 'json'
 
 # The Mech Driver, interacting with a Magento shop page.
 # Note that the Mech does not keep too much state, you have to
@@ -46,10 +47,32 @@ class MagentoMech
     login_with @user, @pass
   end
 
+  # See add_to_cart for more notes
+  def ajax_add_to_cart product_id, qty, form_token
+    if product_id.nil? || qty.to_i <= 0 || form_token.nil?
+      fail "Empty obligatory parameter"
+    end
+
+    url = "#{@base_uri}/checkout/cart/add?product=#{product_id}&qty=#{qty}"
+    result_page = @mech.post "#{@base_uri}/checkout/cart/add/uenc/#{form_token}/product/#{product_id}/?isajaxcart=true&groupmessage=1&minicart=1&ajaxlinks=1",
+      {product: product_id,
+       qty: qty}
+
+    result = JSON.parse result_page.content
+    return !result["outStock"]
+  end
+
   # Put stuff in the cart.
+  # Use the form_token for magento >= 1.8 (or form token enforcing magento
+  # installations), otherwise leave it nil.
+  #
   # Returns true if succeeded, false otherwise.
-  def add_to_cart product_id, qty
+  def add_to_cart product_id, qty, form_token=nil
     fail "Empty obligatory parameter" if product_id.nil? || qty.to_i <= 0
+
+    if !form_token.nil?
+      return ajax_add_to_cart(product_id, qty, form_token)
+    end
     url = "#{@base_uri}/checkout/cart/add?product=#{product_id}&qty=#{qty}"
 
     # Check the returned page name
@@ -73,10 +96,10 @@ class MagentoMech
 
   # Puts as many items of given product to cart as possible
   # Returns number of items put to cart.
-  def add_to_cart! product_id, qty
+  def add_to_cart! product_id, qty, form_token=nil
     # Try to be a bit clever and early find out whether article
     # is out of stock.
-    if add_to_cart(product_id, qty)
+    if add_to_cart(product_id, qty, form_token)
       # to_i
       return qty
     end
@@ -84,7 +107,7 @@ class MagentoMech
     # Apparently not enough in stock!
 
     if qty.to_i > 4
-      if !add_to_cart(product_id, 1)
+      if !add_to_cart(product_id, 1, form_token)
         # out of stock
         return 0
       else
@@ -99,6 +122,7 @@ class MagentoMech
   end
 
   # Get the current carts contents
+  # Returns [[name, qty], [name2, qty2] ... ]
   def get_cart_content
     cart_page = @mech.get("#{@base_uri}/checkout/cart/")
     name_links = cart_page.search('td h2 a')
@@ -112,7 +136,8 @@ class MagentoMech
   def login_with username, password
     login_page = @mech.get("#{@base_uri}/customer/account/login/")
 
-    form = login_page.form_with(:action => '#', :method => 'POST')
+    # Probably we could just send the POST directly.
+    form = login_page.form_with(:action => "#{@base_uri}/customer/account/loginPost/", :method => 'POST')
     form.action = "#{@base_uri}/customer/account/loginPost/"
     form.fields.find{|f| f.name == 'login[username]'}.value = username
     form.fields.find{|f| f.name == 'login[password]'}.value = password

data/lib/magento_remote/version.rb

@@ -1,3 +1,3 @@
 module MagentoRemote
-  VERSION = "0.2.3".freeze
+  VERSION = "0.2.4".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: magento_remote
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.4
 platform: ruby
 authors:
 - Felix Wolfsteller
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-01-25 00:00:00.000000000 Z
+date: 2016-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: mechanize
@@ -145,7 +145,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.4.5
 signing_key: 
 specification_version: 4
 summary: Login to a magento shop and do stuff.