Magento Web Services Guide – How to Check

If you want to skip this authentication steps then you can use cUrl to submit those authentication form without clicking on button.

You can use following tutorial for cUrl: http://php.net/manual/en/book.curl.php

My point of view you need to implement these steps in such way that only once you need to create authentication token after that you can reuse it.

You can use rest.js to implment rest api calls from your mobile app. Refer below urls 1. https://github.com/cujojs/rest 2. https://spring.io/guides/gs/consuming-rest-restjs/

Thanks

Magento sets session and session id into cookies in

Mage_Core_Model_Session_Abstract_Varien::start()

Here you can find the call of php function session_set_cookie_params.

This function sets headers for browser to create cookies with params: lifetime, path, domain, secure, httponly. It is very important always to send the same last four path, domain, secure, httponly parameters because otherwise you will not be able to manage(edit, delete) them.

You can set them in System -> Configuration -> Web -> Session Cookie Management.

On every load Magento validates cookies based on System -> Configuration -> Web -> Session Validation Settings. Probably you have Validate HTTP_USER_AGENT set to yes. It means that if user agent will change(this happens all the time when google chrome get new updates), Magento tries to expire(delete) cookies and then redirect customer to the same page.

Now imagine that browser does not allow to delete cookies(because one of the parametes path, domain, secure, httponly is different). Then you will come to the website with the invalid cookie and Magento again redirects you.

To solve the problem you need to set all Session Validation Settings to No or revert Session Validation Settings to default.

Also make sure that you do not have changes in Mage_Core_Model_Session_Abstract_Varien::start().