如何使用cURL发送cookie ?

这招对我很管用:

curl -v --cookie "USER_TOKEN=Yes" http://127.0.0.1:5000/

我可以看到后端使用的价值

print(request.cookies)

关于如何使用cookie的完整教程，您可以参考https://curl.haxx.se/docs/http-cookies.html。你可以使用

curl -c /path/to/cookiefile http://yourhost/

写一个cookie文件，启动引擎和使用cookie，你可以使用

curl -b /path/to/cookiefile  http://yourhost/

读取cookie并启动cookie引擎，如果不是文件，则将传递给定的字符串。

您在cookie文件中使用错误的格式。正如旋度的文档所述，它使用旧的Netscape cookie文件格式，这与web浏览器使用的格式不同。如果你需要手动创建一个curl cookie文件，这篇文章可以帮助你。在您的示例中，文件应该包含以下行

127.0.0.1   FALSE   /   FALSE   0   USER_TOKEN  in

有7个tab分隔的字段，意思是域， tailmatch， 路径， 安全， 到期， 的名字， 价值。

我正在使用Debian，我无法使用波浪线为路径。最初我用的是

curl -c "~/cookie" http://localhost:5000/login -d username=myname password=mypassword

我必须将其更改为:

curl -c "/tmp/cookie" http://localhost:5000/login -d username=myname password=mypassword

-c创建cookie， -b使用cookie

所以我会用例如:

curl -b "/tmp/cookie" http://localhost:5000/getData

curl -H @<header_file> <host>

因为@<file>支持curl 7.55文件头文件

echo 'Cookie: USER_TOKEN=Yes' > /tmp/cookie

curl -H @/tmp/cookie <host>

docs &提交< / >

我在Windows上使用GitBash，我发现没有什么对我有用。

所以我决定把我的cookie保存到一个名为.session的文件中，并使用cat从它中读取，如下所示:

curl -b $(cat .session) http://httpbin.org/cookies

如果你好奇，我的饼干是这样的:

session=abc123

另一个使用json的解决方案。

旋度:

curl -c /tmp/cookie -X POST -d '{"chave":"email","valor":"hvescovi@hotmail.com"}' -H "Content-Type:application/json" localhost:5000/set


curl -b "/tmp/cookie" -d '{"chave":"email"}' -X GET -H "Content-Type:application/json"  localhost:5000/get


curl -b "/tmp/cookie" -d '{"chave":"email"}' -X GET -H "Content-Type:application/json" localhost:5000/delete

PYTHON代码:

from flask import Flask, request, session, jsonify
from flask_session import Session


app = Flask(__name__)


app.secret_key = '$#EWFGHJUI*&DEGBHYJU&Y%T#RYJHG%##RU&U'
app.config["SESSION_PERMANENT"] = False
app.config["SESSION_TYPE"] = "filesystem"
Session(app)


@app.route('/')
def padrao():
return 'backend server-side.'
    

@app.route('/set', methods=['POST'])
def set():
resposta = jsonify({"resultado": "ok", "detalhes": "ok"})
dados = request.get_json()
try:
if 'chave' not in dados: # não tem o atributo chave?
resposta = jsonify({"resultado": "erro",
"detalhes": "Atributo chave não encontrado"})
else:
session[dados['chave']] = dados['valor']
except Exception as e:  # em caso de erro...
resposta = jsonify({"resultado": "erro", "detalhes": str(e)})


resposta.headers.add("Access-Control-Allow-Origin", "*")
return resposta


@app.route('/get')
def get():
try:
dados = request.get_json()
retorno = {'resultado': 'ok'}
retorno.update({'detalhes': session[dados['chave']]})
resposta = jsonify(retorno)
except Exception as e:
resposta = jsonify({"resultado": "erro", "detalhes": str(e)})
    

resposta.headers.add("Access-Control-Allow-Origin", "*")
return resposta


@app.route('/delete')
def delete():
try:
dados = request.get_json()
session.pop(dados['chave'], default=None)
resposta = jsonify({"resultado": "ok", "detalhes": "ok"})
except Exception as e:  # em caso de erro...
resposta = jsonify({"resultado": "erro", "detalhes": str(e)})
            

resposta.headers.add("Access-Control-Allow-Origin", "*")
return resposta


app.run(debug=True)

下面是发送cookie的正确方式的示例。-H 'cookie: key1=val2; key2=val2;'

cURL也提供了--cookie的便利。运行man curl或tldr curl

这是从Chrome >复制的;网络检测;复制为cURL。

curl 'https://www.example.com/api/app/job-status/' \
-H 'authority: www.example.com' \
-H 'sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"' \
-H 'sec-ch-ua-mobile: ?0' \
-H 'user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.111.111 Safari/111.36' \
-H 'content-type: application/json' \
-H 'accept: */*' \
-H 'origin: https://www.example.com' \
-H 'sec-fetch-site: same-origin' \
-H 'sec-fetch-mode: cors' \
-H 'sec-fetch-dest: empty' \
-H 'referer: https://www.example.com/app/jobs/11111111/' \
-H 'accept-language: en-US,en;q=0.9' \
-H 'cookie: menuOpen_v3=true; imageSize=medium;' \
--data-raw '{"jobIds":["1111111111111"]}' \
--compressed