java - 在 java 中使用 Https 连接登录并获取已记录的 session ID

标签 java https http-headers

我正在尝试使用 https 请求登录网站,然后捕获 session ID。我需要这个 session ID 才能删除 Web 应用程序中的一些标签。

到目前为止,我可以登录该应用程序。登录后,应用程序会将我引导至主页。这是我尝试使用 https 获取主页请求从 cookie 捕获 session ID 的地方。但不幸的是,cookie 不包含 session ID。

当我在登录后向主页发送获取请求时,我得到一个 cookie: header 字段是:{null=[HTTP/1.1 200 OK],Server=[Microsoft-IIS/7.0],Pragma=[no-cache],Date=[Wed, 23 Dec 2015 04:37:13 GMT],Serv =[1],缓存控制=[无缓存,无存储],SI=[1],X-AspNet-Version=[4.0.30319],Set-Cookie=[],Expires=[-1] , Content-Length=[255882], X-Powered-By=[ASP.NET], Content-Type=[text/html;字符集=utf-8]}

这里的 Set-Cookie 字段是空的。

我写了下面几行代码。

package com.iso.mozart.test.ui;


import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.UnsupportedEncodingException;
import java.net.CookieHandler;
import java.net.CookieManager;
import java.net.URL;
import java.net.URLEncoder;
import java.util.ArrayList;
import java.util.List;

import javax.net.ssl.HttpsURLConnection;

import org.apache.http.Header;
import org.apache.http.HttpResponse;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.impl.client.HttpClientBuilder;
import org.jsoup.Jsoup;
import org.jsoup.nodes.Document;
import org.jsoup.nodes.Element;
import org.jsoup.select.Elements;

public class HttpUrlConnectionExample {

  private List<String> cookies;
  private HttpsURLConnection conn;

  private final String USER_AGENT = "Mozilla/5.0";

  public static void main(String[] args) throws Exception {

    String url = "https://www.testpurpose.com/Login.aspx";
    String homepage = "https://www.testpurpose.com/Home.aspx";

    HttpUrlConnectionExample http = new HttpUrlConnectionExample();

    // make sure cookies is turn on
    CookieHandler.setDefault(new CookieManager());

    // 1. Send a "GET" request, so that you can extract the form's data.
    String page = http.GetPageContent(url);
    String postParams = http.getFormParams(page, "username here", "password here");

    // 2. Construct above post's content and then send a POST request for
    // authentication
    http.sendPost(url, postParams);

    // 3. success then go to homepage.

    String result = http.GetPageContent(homepage);
    System.out.println(result);
  }   

private void sendPost(String url, String postParams) throws Exception {

    URL obj = new URL(url);
    conn = (HttpsURLConnection) obj.openConnection();

    // Acts like a browser
    conn.setUseCaches(false);
    conn.setRequestMethod("POST");
    conn.setRequestProperty("Host", "www.testpurpose.com");
    conn.setRequestProperty("User-Agent", USER_AGENT);
    conn.setRequestProperty("Accept","text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8");
    conn.setRequestProperty("Accept-Language", "en-US,en;q=0.5");
    for (String cookie : this.cookies) {
        conn.addRequestProperty("Cookie", cookie.split(";", 1)[0]);
    }
    conn.setRequestProperty("Connection", "keep-alive");
    conn.setRequestProperty("Referer", url);
    conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
    conn.setRequestProperty("Content-Length", Integer.toString(postParams.length()));

    conn.setDoOutput(true);
    conn.setDoInput(true);

    // Send post request
    DataOutputStream wr = new DataOutputStream(conn.getOutputStream());
    wr.writeBytes(postParams);
    wr.flush();
    wr.close();

    int responseCode = conn.getResponseCode();
    System.out.println("\nSending 'POST' request to URL : " + url);
    System.out.println("Post parameters : " + postParams);
    System.out.println("Response Code : " + responseCode);
    //  System.out.println("HEADERS:"+conn.getRequestMethod());

    BufferedReader in = 
             new BufferedReader(new InputStreamReader(conn.getInputStream()));
    String inputLine;
    StringBuffer response = new StringBuffer();

    while ((inputLine = in.readLine()) != null) {
        response.append(inputLine);
    }
    in.close();
    // System.out.println(response.toString());

  }

  private String GetPageContent(String url) throws Exception {

    URL obj = new URL(url);
    conn = (HttpsURLConnection) obj.openConnection();

    // default is GET
    conn.setRequestMethod("GET");

    conn.setUseCaches(false);

    // act like a browser
    conn.setRequestProperty("User-Agent", USER_AGENT);
    conn.setRequestProperty("Accept","text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8");
    conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
    conn.setRequestProperty("Accept-Language", "en-US,en;q=0.5");
    conn.getRequestProperties();
    conn.setDoOutput(true);
    //  System.out.println("Huhahahahah :"+conn.getHeaderFields());
    if (cookies != null) {
        for (String cookie : this.cookies) {
            conn.addRequestProperty("Cookie", cookie.split(";", 1)[0]);
        }
    }
    int responseCode = conn.getResponseCode();
    System.out.println("\nSending 'GET' request to URL : " + url);
     System.out.println("headers fields are :"+conn.getHeaderFields());
    System.out.println("Response Code : " + responseCode);

    BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream()));
    String inputLine;
    StringBuffer response = new StringBuffer();

    while ((inputLine = in.readLine()) != null) {
        response.append(inputLine);
    }
    in.close();

    // Get the response cookies
    setCookies(conn.getHeaderFields().get("Set-Cookie"));      //This is where I have tried to capture the session id from cookie but could it doesnot contain session id.
    return response.toString();


  }

  public String getFormParams(String html, String username, String password)
        throws UnsupportedEncodingException {

    System.out.println("Extracting form's data...");

    Document doc = Jsoup.parse(html);

    // Google form id
    Element loginform = doc.getElementById("form1");
    Elements inputElements = loginform.getElementsByTag("input");
    List<String> paramList = new ArrayList<String>();
    for (Element inputElement : inputElements) {
        String key = inputElement.attr("name");
        String value = inputElement.attr("value");

        if (key.equals("txtUserID"))
            value = username;
        else if (key.equals("txtPassword"))
            value = password;
        paramList.add(key + "=" + URLEncoder.encode(value, "UTF-8"));
    }

    // build parameters list
    StringBuilder result = new StringBuilder();
    for (String param : paramList) {
        if (result.length() == 0) {
            result.append(param);
        } else {
            result.append("&" + param);
        }
    }
    return result.toString();
  }

  public List<String> getCookies() {
    return cookies;
  }

  public void setCookies(List<String> cookies) {
    this.cookies = cookies;
  }

}

最佳答案

CookieHandler.setDefault(new CookieManager());

使用此行更改代码中的上一行。

CookieHandler.setDefault(new CookieManager(null, CookiePolicy.ACCEPT_ALL));

让我知道这是否适合您。

关于java - 在 java 中使用 Https 连接登录并获取已记录的 session ID,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/34428633/

相关文章:

java - Tomcat连接池废弃问题

javascript - 从 Angular 中的 REST API 获取 HTTPS 时出错

java - 泽西客户端 HTTPS 性能问题

javascript - 在将 header 发送到 ServerResponse.setHeader 中的客户端 [dev.start] 后无法设置 header

http-headers - 我可以禁止在 AWS Cloudfront 上发布 Etag header 吗?

php - 如何使用在 W3C 验证器中有效的 PHP 将 HTTP header 设置为 UTF-8

java - 使用 ab 进行测试时,套接字服务器挂起,等待 BufferedReader.readline()

java - Java 中是否有等效的 Python 异常?

java - Log4j2 - 将日志写入 Writer

java - 当发现 302 状态代码时,私有(private) IP 在 HTML 中公开