我似乎是一個明顯的問題，以編程方式登錄網站，然后在通過身份驗證時獲取資料。
我已經閱讀 StackOverflow 好幾天了，但找不到可行的解決方案。
這是登錄表單，也可以使用單獨的 URL 訪問它，通過瀏覽器登錄后，它會重定向到主頁：
<strong class="popup-title">i class="fa fa-lock" aria-hidden="true"></i>Login</strong>
<div class="popup-holder">
<form action="https://test.com/login/" data-form="ajax" method="post">
<div class="generic-error hidden">
</div>
<div>
<div class="row">
<label for="login_username" class="field-label required">Username</label>
<input type="text" name="username" id="login_username" class="textfield"
placeholder="Enter your username" />
<div class="field-error down"></div>
</div>
<div class="row">
<label for="login_pass" class="field-label required">Password</label>
<input type="password" name="pass" id="login_pass" class="textfield" placeholder="Enter your password" />
<div class="field-error down"></div>
</div>
<div class="row">
<div class="col-sm-4" style="padding-left: 0;">
<input type="checkbox" name="remember_me" id="login_remember_me" class="checkbox" value="1" checked />
<label for="login_remember_me">remember me</label>
</div>
<div class="col-sm-5 forgot pull-right" style="padding-right: 0px;">
<a href="https://test.com/reset-password/" data-fancybox="ajax">Forgot password?</a><br />
<a href="https://test.com/resend-confirmation/" data-fancybox="ajax">Missing confirmation email?</a>
</div>
</div>
<div class="row">
<input type="hidden" name="action" value="login" />
<input type="hidden" name="email_link" value="https://test.com/email/" />
<input type="submit" class="btn btn-danger btn-lg btn-block" value="Log in" />
</div>
<div class="row">
<span class="form-separator">Not a member yet? Sign up now for free!</span>
</div>
<div class="row">
<a href="https://test.com/signup/" class="btn btn-info btn-lg btn-block" data-fancybox="ajax">Sign up</a>
</div>
</div>
</form>
</div>
這是我嘗試過的 Python 代碼：
payload = {
'username': 'mylogin',
'pass': 'mypass'
}
with requests.Session() as s:
r = s.post('https://test.com/login/', data=payload)
r = s.get('https://test.com/testpage/')
PowerShell 中的相同邏輯：
$payload = @{
username = 'mylogin'
pass = 'mypass'
}
$r = Invoke-RestMethod 'https://test.com/login/' -Method POST -Body $payload -SessionVariable 'Session'
$r = Invoke-WebRequest -Uri "https://test.com/testpage/" -WebSession $Session
但是以上都沒有奏效，我仍然為未經身份驗證的用戶獲得結果。
uj5u.com熱心網友回復：
這是一個使用我的一個 Django 站點和一個演示登錄帳戶的作業示例。
requests.Session()用于管理cookies。為了使其作業，我必須明確管理標題內容，例如Referer在發布登錄名之前添加。
import requests
import re
base_url = 'https://www.archery-analytics.com/en/'
# use session object to manage cookies and headers
s = requests.Session()
s.headers.update({
'Host': 'www.archery-analytics.com',
'Origin': 'https://www.archery-analytics.com',
})
# get login form and cookies
r1 = s.get(base_url 'public/home')
print(r1.status_code, r1.url)
# add Referer to header
s.headers.update({
'Referer': r1.url,
})
# get csrf token of form (= hidden input element of login form)
reggie = re.compile(rb".*name=\"csrfmiddlewaretoken\" value=\"(?P<csrf>\w )\".*")
match = reggie.findall(r1.content)
# login data for demo account
payload = {
'username': 'RyngDyng',
'password': '123demo123',
'login': '',
'csrfmiddlewaretoken': match[0].decode("utf-8")
}
# login post
r2 = s.post(base_url 'global/login', data=payload)
print(r2.status_code, r2.url)
# check successful login
if r2.status_code == requests.codes.ok:
# test logged in: access to page for editing user profile
r3 = s.get(base_url 'global/edit_profile')
print(r3.status_code, r3.url)
# logout
r4 = s.get(base_url 'global/logout')
print(r4.status_code, r4.url)
輸出：
200 https://www.archery-analytics.com/en/public/home
200 https://www.archery-analytics.com/en/public/home
200 https://www.archery-analytics.com/en/global/edit_profile
200 https://www.archery-analytics.com/en/public/home
轉載請註明出處，本文鏈接：https://www.uj5u.com/net/387392.html