我如何使用PHP curl使用HTTP基本身份验证进行请求?

我正在用PHP构建一个REST web服务客户端，目前我正在使用curl向服务发出请求。

我如何使用curl进行身份验证(http基本)请求?我必须自己添加标题吗?

604880 次浏览
小开
最佳答案

你想要的是:

curl_setopt($ch, CURLOPT_USERPWD, $username . ":" . $password);
Zend有一个REST客户端和zend_http_client，我确定PEAR有某种包装器。

所以整个请求看起来是这样的:

$ch = curl_init($host);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/xml', $additionalHeaders));
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_USERPWD, $username . ":" . $password);
curl_setopt($ch, CURLOPT_TIMEOUT, 30);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $payloadName);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$return = curl_exec($ch);
curl_close($ch);
小开

Yahoo有一个使用PHP调用REST服务的教程:

Make Yahoo!Web服务REST调用PHP

我自己没有使用过，但雅虎就是雅虎，至少应该保证一定程度的质量。但是，它们似乎不包括PUT和DELETE请求。

而且，用户对curl_exec()的注释和其他包含很多好的信息。

小开

与SOAP不同，REST不是一个标准化的协议，因此拥有一个“REST客户端”有点困难。但是，由于大多数基于rest的服务使用HTTP作为其底层协议，因此您应该能够使用任何HTTP库。除了cURL, PHP还通过PEAR提供了以下功能:

HTTP_Request2

这所取代

HTTP_Request

一个他们如何做HTTP基本认证的例子

// This will set credentials for basic auth
$request = new HTTP_Request2('http://user:password@www.example.com/secret/');

也支持文摘认证

// This will set credentials for Digest auth
$request->setAuth('user', 'password', HTTP_Request2::AUTH_DIGEST);
小开

CURLOPT_USERPWD基本上是发送带有http头的user:password字符串的base64:

Authorization: Basic dXNlcjpwYXNzd29yZA==

因此，除了CURLOPT_USERPWD之外，你还可以使用HTTP-Request头文件选项，如下所示:

$headers = array(
'Content-Type:application/json',
'Authorization: Basic '. base64_encode("user:password") // <---
);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
小开

最简单、最自然的方法是直接使用CURL。

这对我来说很管用:

<?php
$login = 'login';
$password = 'password';
$url = 'http://your.url';
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
curl_setopt($ch, CURLOPT_USERPWD, "$login:$password");
$result = curl_exec($ch);
curl_close($ch);
echo($result);
小开
有多种REST框架可供选择。我强烈建议查看苗条的迷你框架PHP
在这里是一个其他的列表
小开

Michael Dowling非常积极地维护狂饮是一个很好的方法。除了优雅的接口、异步调用和符合PSR，它还使REST调用的身份验证头非常简单:

// Create a client with a base URL
$client = new GuzzleHttp\Client(['base_url' => 'http://myservices.io']);


// Send a request to http://myservices.io/status with basic authentication
$response = $client->get('/status', ['auth' => ['username', 'password']]);

看到的文档。

小开

如果授权类型是基本认证，并且发布的数据是json，那么这样做

<?php


$data = array("username" => "test"); // data u want to post
$data_string = json_encode($data);
$api_key = "your_api_key";
$password = "xxxxxx";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://xxxxxxxxxxxxxxxxxxxxxxx");
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 20);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data_string);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_USERPWD, $api_key.':'.$password);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
'Accept: application/json',
'Content-Type: application/json')
);


if(curl_exec($ch) === false)
{
echo 'Curl error: ' . curl_error($ch);
}
$errors = curl_error($ch);
$result = curl_exec($ch);
$returnCode = (int)curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
echo $returnCode;
var_dump($errors);
print_r(json_decode($result, true));
小开

对于那些不想使用curl的人:

//url
$url = 'some_url';


//Credentials
$client_id  = "";
$client_pass= "";


//HTTP options
$opts = array('http' =>
array(
'method'    => 'POST',
'header'    => array ('Content-type: application/json', 'Authorization: Basic '.base64_encode("$client_id:$client_pass")),
'content' => "some_content"
)
);


//Do request
$context = stream_context_create($opts);
$json = file_get_contents($url, false, $context);


$result = json_decode($json, true);
if(json_last_error() != JSON_ERROR_NONE){
return null;
}


print_r($result);
小开

你只需要指定CURLOPT_HTTPAUTH和CURLOPT_USERPWD选项:

$curlHandler = curl_init();


$userName = 'postman';
$password = 'password';


curl_setopt_array($curlHandler, [
CURLOPT_URL => 'https://postman-echo.com/basic-auth',
CURLOPT_RETURNTRANSFER => true,


CURLOPT_HTTPAUTH => CURLAUTH_BASIC,
CURLOPT_USERPWD => $userName . ':' . $password,
]);


$response = curl_exec($curlHandler);
curl_close($curlHandler);

或者指定头文件:

$curlSecondHandler = curl_init();


curl_setopt_array($curlSecondHandler, [
CURLOPT_URL => 'https://postman-echo.com/basic-auth',
CURLOPT_RETURNTRANSFER => true,


CURLOPT_HTTPHEADER => [
'Authorization: Basic ' . base64_encode($userName . ':' . $password)
],
]);


$response = curl_exec($curlSecondHandler);
curl_close($curlSecondHandler);

狂饮的例子:

use GuzzleHttp\Client;
use GuzzleHttp\RequestOptions;


$userName = 'postman';
$password = 'password';


$httpClient = new Client();


$response = $httpClient->get(
'https://postman-echo.com/basic-auth',
[
RequestOptions::AUTH => [$userName, $password]
]
);


print_r($response->getBody()->getContents());

看到https://github.com/andriichuk/php-curl-cookbook#basic-auth

小开

Basic方法的另一种方法是:

$curl = curl_init();


$public_key = "public_key";
$private_key = "private_key";


curl_setopt_array($curl, array(
CURLOPT_URL => "https://url.endpoint.co/login",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 0,
CURLOPT_FOLLOWLOCATION => true,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => array(
"Content-Type: application/json",
"Authorization: Basic ".base64_encode($public_key.":".$private_key)
),
));
$response = curl_exec($curl);
curl_close($curl);
echo $response;

提交答案