My developer has written PHP code on his CMS that connects via SOAP on behalf of the user browsing the site, to manage the cart from their CMS.
I'm worried about the interaction of SOAP session (which owns the cart), frontend session (when the user finally gets to Magento), CMS session (which stores the SOAP session), the eventual "logged in" session if the user has an account
Do I need to be worried or is this actually a perfectly normal scenario?
I have a content site developed by an agency on their in house CMS which needs to integrate with a new Magento site
They are trying to build elements which show products within the cms, including an "add to cart" and a mini cart (ajax)
They are not Magento developers, just general PHP (cake) developers and at the moment the solution is a bit clunky and worries me:
product information copied over SOAP API to be available within the Cake CMS, nightly or on demand(that part does not worry me beyong mapping maintenance)
locally built Cake "cart" view which connects to Magento to add/edit cart over SOAP. Note that at this point shoppers are usually "guests"
when the customer clicks "checkout" they are taken to the Magento checkout pages to continue/finish in Magento, as guest or with log in.
it is the Cake->Magento cart over soap part that worries me. All the use cases for this are for an admin person to be creating an order, not for the user to be adding to cart as guest from another page.
SOAP is using its own API session (using a particular user), this session is stored for reuse in the Cake system (so the user's cart is stored in the cake CMS session via a SOAP session cookie which is passed to the cart and checkout links).
Because this is "php to Magento" I'm not sure the frontend session gets created/passed correctly (or different ones created) and I have no idea what happens when there are many visitors using this (all with same API user), and what happens when they log in to their Magento account too.
At first glance products are indeed added to cart properly but the more I look at it the more I worry there could be session collisions, session loss, etc
For one products added within Magento (say from a cart/checkout upsell) do not appear in the SOAP version of the cart, and I have also been unable to get them to make grouped products added as group products (see Magento SOAP API Add to cart, how to add a grouped product?)
I'm worried about the interaction of frontend session, cake session, SOAP session and the eventual user account login - but do I need to be worried or is this actually a perfectly normal scenario
PPS: What I really need is to be able to create clean "add to cart" buttons that work, including for grouped product, knowing the IDs - and to pull and display the cart via Ajax. Not having much luck with either SOAP, PHP or Magento module so far.