0


我究竟做错了什么？我正在尝试从用于验证用户身份的服务器获取重定向信息。这适用于我的 C# 代码，但我无法使我的 C++ 代码正常工作。
所以这是有效的 C# 代码：

string postData = @"username=myUsername&serviceID=someServiceId&password=somePassword";
byte[] postBytes = Encoding.UTF8.GetBytes(postData);

// create the proper HttpWebRequest
HttpWebRequest request = (HttpWebRequest)WebRequest.Create(@"https://myAuthServer.com/login");

request.Method = "POST";
request.ContentType = "application/x-www-form-urlencoded";
request.Accept = "utf-8";
request.ContentLength = postBytes.Length;
request.PreAuthenticate = true;
request.AllowAutoRedirect = false;

// now get the information from the login server
Stream requestStream = request.GetRequestStream();
HttpWebResponse response = null;

// post the data
requestStream.Write(postBytes, 0, postBytes.Length);

// get the response and get the wanted information
response = (HttpWebResponse)request.GetResponse();

const string Session = "?session=";

Uri location = new Uri(response.Headers["Location"]);
m_redirect = location.Host + location.LocalPath;
m_authentificationId = location.Query.Substring(Session.Length);

我使用这些信息进行进一步的身份验证。一切安好。

我现在想对 C++ 代码做同样的事情。但是该代码不起作用。
所以这里是：

HINTERNET hOpen, hConnect, hReq;
hOpen = InternetOpen(_T(""), INTERNET_OPEN_TYPE_DIRECT, _T(""), _T(""), 0);
if(!InternetHandleValid(hOpen))
{
    return false;
}

hConnect = InternetConnect(hOpen, _T("myAuthServer.com"),
    INTERNET_DEFAULT_HTTPS_PORT, NULL, NULL, INTERNET_SERVICE_HTTP, 0, 0);
if(!InternetHandleValid(hConnect))
{
    return false;
}

hReq = HttpOpenRequest(hConnect, _T("POST"), _T("/login"), NULL, NULL,
    NULL, INTERNET_FLAG_NO_AUTO_REDIRECT | INTERNET_FLAG_SECURE, 0);

if(!InternetHandleValid(hReq))
{
    return false;
}

if (!HttpAddRequestHeaders(hReq, _T("Content-Type: application/x-www-form-urlencoded"), -1L, HTTP_ADDREQ_FLAG_ADD))
{
    return false;
}

if (!HttpAddRequestHeaders(hReq, _T("Expect: 100-continue"), -1L, HTTP_ADDREQ_FLAG_ADD))
{
    return false;
}

if (!HttpAddRequestHeaders(hReq, _T("Connection: Keep-Alive"), -1L, HTTP_ADDREQ_FLAG_ADD))
{
    return false;
}

if (!HttpAddRequestHeaders(hReq, _T("Accept: utf-8"), -1L, HTTP_ADDREQ_FLAG_ADD))
{
    return false;
}

CString cstrPostData = _T("username=myUsername&serviceID=someServiceId&password=somePassword");

char buffer[10];
_itoa_s(cstrPostData.GetLength(), buffer, 10, 10);
CString cstrContentLength(buffer);

if (!HttpAddRequestHeaders(hReq, _T("Content-Length: ") + cstrContentLength, -1L, HTTP_ADDREQ_FLAG_ADD))
{
    return false;
}

LPVOID lpData = (LPVOID)cstrPostData.GetBuffer(cstrPostData.GetLength());
if(HttpSendRequest(hReq, NULL, -1L, lpData, wcslen(cstrPostData)))
{
    DWORD dwCode, dwCodeSize; 
    dwCodeSize = sizeof(DWORD);
    if(!HttpQueryInfo(hReq, HTTP_QUERY_STATUS_CODE | HTTP_QUERY_FLAG_NUMBER, &dwCode, &dwCodeSize, NULL))
    {
        return false;
    }

    // we need to have the 302 (Redirect) here
    if (dwCode != 302)
    {
        return false;
    }

    wchar_t chData[1024] = _T("\0");
    DWORD dwBuffer = 1023;
    if(!HttpQueryInfo(hReq, HTTP_QUERY_RAW_HEADERS_CRLF, (LPVOID)chData, &dwBuffer, NULL))
    {
        return false;
    }

    CStringA cstrHeaders(chData);
    bool b = ExtractRedirectAndSessionFromHeader(cstrHeaders);
}

现在的问题是我Location: https://myAuthServer.com/centrallogin-2.2/error.jsp没有正确的重定向和会话。我已经发现，当我没有request.ContentType正确设置时，我的 C# 代码中也会出现这个错误。但我确实在我的 C++ 代码中设置了 Content-Type 标头。所以我不知道我做错了什么。
还有什么想法吗？
编辑：
好的，我也尝试过使用 WinHTTP API。这是我的代码：

HINTERNET hSession = NULL, hConnect = NULL, hRequest = NULL;

// Use WinHttpOpen to obtain a session handle.
hSession = WinHttpOpen(NULL, WINHTTP_ACCESS_TYPE_DEFAULT_PROXY, WINHTTP_NO_PROXY_NAME,
    WINHTTP_NO_PROXY_BYPASS, 0);

hConnect = WinHttpConnect(hSession, L"myAuthServer.com", INTERNET_DEFAULT_HTTPS_PORT, 0);
hRequest = WinHttpOpenRequest(hConnect, L"POST", L"/login", NULL, WINHTTP_NO_REFERER, WINHTTP_DEFAULT_ACCEPT_TYPES, WINHTTP_FLAG_SECURE);

// disable auto redirects
DWORD dwOptionValue = WINHTTP_DISABLE_REDIRECTS;
BOOL b = WinHttpSetOption(hRequest, WINHTTP_OPTION_DISABLE_FEATURE, &dwOptionValue, sizeof(dwOptionValue));

static const WCHAR szContentType[] = L"Content-Type: application/x-www-form-urlencoded\r\n";
b = WinHttpAddRequestHeaders(hRequest, szContentType, (DWORD)-1, WINHTTP_ADDREQ_FLAG_ADD & WINHTTP_ADDREQ_FLAG_REPLACE);

CString cstrPostData = _T("username=myUsername&serviceID=someServiceId&password=somePassword");
b = WinHttpSendRequest(hRequest, WINHTTP_NO_ADDITIONAL_HEADERS, -1L, WINHTTP_NO_REQUEST_DATA, 0, wcslen(cstrPostData), 0);

DWORD dwBytesWritten = 0;
b = WinHttpWriteData(hRequest, cstrPostData, wcslen(cstrPostData), &dwBytesWritten);

b = WinHttpReceiveResponse(hRequest, NULL);

DWORD dwSize = sizeof(DWORD);
DWORD dwStatusCode = 0;
b = WinHttpQueryHeaders(hRequest, WINHTTP_QUERY_STATUS_CODE | WINHTTP_QUERY_FLAG_NUMBER, NULL, &dwStatusCode,
    &dwSize, WINHTTP_NO_HEADER_INDEX);

wchar_t chData[1024] = _T("\0");
DWORD dwBuffer = 1023; 
b = WinHttpQueryHeaders(hRequest, WINHTTP_QUERY_RAW_HEADERS_CRLF, NULL, (LPVOID)chData, &dwBuffer, NULL);
CStringA cstrHeaders(chData);

WinHttpCloseHandle(hSession);
WinHttpCloseHandle(hConnect);
WinHttpCloseHandle(hRequest);

cstrPostData.ReleaseBuffer();

所以重定向 url 和会话 id 应该在 chData 中。但结果又是错误的。我也试过 Wireshark。由于这一切都是 HTTPS，我无法从中读出太多信息。我唯一可以比较的是帧数等。使用 WinHTTP 时，Wireshark 日志看起来很相似。所以我认为这是更好的方法。
还有什么想法吗？

4

2 回答 2

1

引用此功能的 MSDN 页面：

指向包含要附加到请求的标头的字符串变量的指针。每个标题必须以 CR/LF（回车/换行）对终止。

所以你的字符串需要以 "\r\n" 结尾

于 2010-03-05T12:05:41.257 回答
0

好的，我终于修好了。问题是我的帖子数据字符串CString cstrPostData被解释为CStringW. 所以发送的数据就是问题所在。当我明确地将发布数据字符串更改为CStringA cstrPostData一切正确时。

于 2010-03-11T13:55:21.060 回答