Home  >  Article  >  Backend Development  >  Web loginAuthorization verification

Web loginAuthorization verification

WBOY
WBOYOriginal
2016-08-08 09:06:481961browse

Access the data of a service software of the server through Http, the browser will pop up the following verification pop-up box:
Web loginAuthorization verification

Because I want to use the PHP curl method to obtain data, but I don’t know how to set the username and password verification parameters:
I found that it doesn’t work:

<code>curl_setopt($curl, CURLOPT_USERPWD, "name:pwd"); 
curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY); </code>

After using postman to simulate login, I found an item in the request header:
Web loginAuthorization verification

Then add a request header to the PHP curl method:

<code>curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-type: application/json','Authorization:Basic TnhFY29AMjAxNjojQGlIeVg0eStHUFE='));</code>

In this way, you can request the data.
But the problem is that because the script needs to be placed on the server to run all the time, if this hard-coded verification expires, the verification will fail again and there will be no permission.
How can I set the php Curl username and password parameters so that I can always verify the login?

Reply content:

Access the data of a service software of the server through Http, the browser will pop up the following verification pop-up box:
Web loginAuthorization verification

Because I want to use the PHP curl method to obtain data, but I don’t know how to set the username and password verification parameters:
I found that it doesn’t work:

<code>curl_setopt($curl, CURLOPT_USERPWD, "name:pwd"); 
curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY); </code>

After using postman to simulate login, I found an item in the request header:
Web loginAuthorization verification

Then add a request header to the PHP curl method:

<code>curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-type: application/json','Authorization:Basic TnhFY29AMjAxNjojQGlIeVg0eStHUFE='));</code>

In this way, you can request the data.
But the problem is that because the script needs to be placed on the server to run all the time, if this hard-coded verification expires, the verification will fail again and there will be no permission.
How can I set the php Curl username and password parameters so that I can always verify the login?

This is PHP HTTP verification, which is generally not done. After all, HTTP verification is too simple

http://php.net/manual/zh/feat...

<code>$username='ABC';
$password='XYZ';
$URL='<URL>';

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$URL);
curl_setopt($ch, CURLOPT_TIMEOUT, 30); //timeout after 30 seconds
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
curl_setopt($ch, CURLOPT_USERPWD, "$username:$password");
$status_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);   //get status code
$result=curl_exec ($ch);
curl_close ($ch);</code>

  1. Use CURL to simulate login and get Authorization Token

  2. Use the Token obtained in step 1 to make the next request

The Token in step 1 can be cached appropriately, and the cache time depends on the server.
Digression: Personally, I feel that the server side is written by Yii2.

I have done something similar before. After a long time, I found it too troublesome, so I finally solved it with phantomjs. PHP calls the node program.

Add this attribute

<code>$user = 'hello';
$pass = '$world';
curl_setopt($ch, CURLOPT_USERPWD, "{$user}:{$pass}");  </code>
Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn