Web service one-page documentation
Last updated
Was this helpful?
Last updated
Was this helpful?
Table of contents
In order for you to view, edit and delete the data on your PrestaShop store through its web service, you first need to enable the web service feature, and then create an access key.
Configure your PHP installation so that it has the cURL extension installed and enabled:
With Windows, place this line in your php.ini file:
With Linux/Mac, install the cURL extension:
Go in the PrestaShop back office, open the "Webservice" page under the "Advanced Parameters" menu, and then choose "Yes" for the "Enable PrestaShop's webservice". Save your change: you're done!
Open the "Webservice" page under the "Advanced Parameters" menu, and then click the "Add New" button to access the account configuration section. A long form appears:
Key. The API key serves as the main identifier for the webservice account you are creating. Click the "Generate" button to get an unique authentication key. You can also create your own (which must be 32 characters long), but using a generated key prevents wrong-doers from guessing your key too easily. Using this key, you and other selected users will be able to access the webservice.
Key description. Helps you remember who you created that key for, what are the access rights assigned to it, etc. The description is not public, but make sure to put all the keywords pertaining to the user, so that you can find their key more quickly.
Status. You can disable any key at any time.
Permissions. This section is very important, as it enables you to assign rights for each resource you want to make available to this key. Indeed, you might want a user to have read and write access on some resources, but only read access on others – and no access to the more important ones. In the list of permissions, the checkbox most on the left enables you to define all the rights for a given resource. Likewise, the checkbox at the top of each column enables you to give the select right (View, Modify, etc.) to all the resources. Make sure to only select the rights needed for the usage of that key. Do not give all the rights for all resources to any key, keep that to yours and yours only.
Shop association. This only appears in multistore mode. It enables you to choose which of your stores the key owner should have access to.
If you choose to use a custom passkey instead of a generated one, make sure it is very secure and that its rights are limited – and that it is 32characters long!
The endpoint to your store's webservice is located in the /api/ folder at the root of your installation of Prestashop:
To access it, you need to provide your API key when request. There is no password, providing your API key is enough – and therefore the key should be kept secret by the user!
You can either type the API endpoint address directly then enter your API key, or indicate your API key in the address. Here is an example, with "UCCLLQ9N2ARSHWCXLT74KUKSSK34BFKX" being the API key.
You can test this with any browser that supports XML.
If no permission has been set for the key, then the browser will keep asking you to enter the key indefinitely.
If you cannot access some resources, the API might answer with this XML response:
Using XLink, you will then be able to access your various resources. XLink associates an XML file to another XML file via a link.
Copy/paste the file into an empty text local file, using for instance Notepad.
Save the file as PSWebServiceLibrary.php.
Put PSWebServiceLibrary.php at the root of your web server, and add this line at the beginning of any PHP file that needs to use your store's webservice.
Then, you must create an instance of the PrestaShopWebservice object, which takes 3 parameters in its constructor:
The authentication key (ex: UCCLLQ9N2ARSHWCXLT74KUKSSK34BFKX).
A boolean value, indicating whether the webservice must use its debug mode.
Here's how you create a webservice call:
It is essential that you understand how to handle errors with the webservice library. By implementing error-catch method early, you will more easily detect issues, and be able to correct them on the go.
How it works
The error handling is done within a try..catch block, with the webservice processing being done in the try section, the catch one containing the error handling code.
Example
That means each creation or use of the library must be located within a "try" block. The "catch" block can then handle the error if it occurs during the execution of the try block. Now we'll see how to list all customers via the webservice, and then we will see the four CRUD methods.
In the following code sample, we want to get the list of all customers:
In the try block, we instantiate the PrestaShopWebservice object with the necessary parameters and retrieve the customer resource XML in a variable.
In the catch block, we put code to display the PHP error message, if anything wrong happens in the try block.
As shown above, you have to instantiate the PrestaShopWebservice object in order to use its methods: add(), get(), edit() and delete().
You can also directly use call the REST API and get XML results, as this correspondence table shows:
CRUD operations
SQL statements
PrestaShopWebservice methods
HTTP methods
Create
INSERT
add()
POST
Read
SELECT
get()
GET
Update
UPDATE
edit()
PUT
Delete
DELETE
delete()
DELETE
Using the PrestaShopWebservice methods
Let's see how to view a full list of client IDs. As you can see from the table above, we need the get() method in order to retrieve a XML file containing all the customers. The parameter has to be a key-value array, where we define the resource we want:
Key
Value
resource
customers
The value defines the resource that the webservice will use in a future call. The value could be carrier types, countries or any other type of resource that can be found in the "Available resources" section of this guide.
The code
In order to retrieve a list of customers in XML format, you only need to instantiate PrestaShopWebservice (a seen earlier) and use this code:
The result
Launching the code above will return a XML object containing all the current customer IDs on the store:
With this information, you can access the customer that interests you by using the value in the id attribute:
Structure
As you can see in the result in the previous section, the data returned by calling $webService->get() puts you at the root of the XML document, in the context you requested.
To access the fields of clients who are children of the <customers> tag, we only need to retrieve all fields in an associative array in XML, like this:
From there, you can easily access client IDs. Here's an example with a path from identifiers:
Thanks to these elements, you can create a HTML table containing all the client IDs – or anything that displays this information in your interface.
Using HTTP requests
If you would rather not use the PrestaShopWebservice object, note that PrestaShop's webservice is RESTful, in that you can work with its data using the known HTTP verbs just as easily as you would use the methods of the PrestaShopWebservice object.
Viewing your data follows the same rule, but with a HTTP GET request on the same URL: To view your data you simply have to launch an HTTP GET request on the following URL:
The resulting XML document is the same as the one obtained using PrestaShopWebservice's get() method.
Creating and adding data takes a bit more work. Indeed, in order to create a new entry or edit an existing one, you need to send a fully formed and complete XML document, whether you use PrestaShopWebservice or the HTTP methods.
When you need to create a new entry, the API can help you by providing a blank schema for any resource, or even a synopsis with indications of the meaning for each tag:
When a client is created from within PrestaShop's administration interface, a confirmation e-mail is sent to the client. This cannot be done directly with the webservice: there is no way to trigger the sending of that confirmation e-mail.
However, you can create an override file for the Customer class and override the addWs() method. This method is similar to ObjectModel::add() but is only called from the webservice. You can find examples of its use in the Product and Order classes.
The RESTful-ness of the API goes all the way: in order to delete the product with an ID of 12, you simply have to launch an HTTP DELETE request on the following URL:
The /api/ URL gives you the root of all the resources, in the form of an XML file.
Here it is, extremely simplified. This list is current as of version 1.5.4.1 of PrestaShop. Note that we only show the API resources available for one of the available stores.
As with any XLink-bearing XML file, each resource element leads to more resources, linked from the xlink attribute.
In addition, the element contains a description of the resource, and two schemas: a blank one, which you can use to create a new item, and a synopsis one, which is just like the blank one but with a detailed description of what type of data is expected in each element.
Here is an extract of the Customer blank schema:Blank schema
Here is an extract of the Customer synopsis schema:Synopsis schema
This chapter aims at grouping all the information from the into a handy one-page doc that you can print and keep at hand.
If PrestaShop is installed at the root of your server, you can access the API here:
If PrestaShop is installed in a subfolder of your server, you can access the API here:
At the root of the server:
In a subfolder of the server:
You will need the latest version of the PSWebServiceLibrary.php file, which can be found on our code repository:
To download the file:
Click here to view the raw file:
You can also directly download a zip archive of all the files in this repository, including the example files, by clicking here:
The store's root path (ex: ).
Error handling with the webservice library is done using PHP exceptions. If you do not know about them, you should read , as exceptions are an essential part of good coding practice.
All the example files can be found on our code repository:
The value types can be found in the .