Java HttpClient accessing image with session id

Question

I'm trying to access an image through a url. The problem is I have to be authenticated via a session id to access the image. I'm trying to get authenticated but I'm getting a 403. Also, how would I add my session id and other information after being authenticated to grab the input stream of the image? Here is my attempt:

CloseableHttpClient httpClient = HttpClients.createDefault();
HttpPost httpPost = new HttpPost("https://cloud.openalpr.com/account/login/");
List<NameValuePair> form = new ArrayList<>();
form.add(new BasicNameValuePair("username","user"));
form.add(new BasicNameValuePair("password", "password"));

UrlEncodedFormEntity entity = new UrlEncodedFormEntity(form, Consts.UTF_8);
    httpPost.setEntity(entity);
    httpPost.setHeader("Content-type", "application/x-www-form-urlencoded");
httpPost.setHeader("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X ...");
CloseableHttpResponse response = httpClient.execute(httpPost);

score 0 · Answer 1 · answered May 03 '18 at 03:59

0

This server requires others fields: csrfmiddlewaretoken and next. See in below image extracted from site https://cloud.openalpr.com/account/login/

In this way you must does:

List<NameValuePair> form = new ArrayList<>();
form.add(new BasicNameValuePair("username","user"));
form.add(new BasicNameValuePair("password", "password"));
form.add(new BasicNameValuePair("csrfmiddlewaretoken", "xxxxxxx"));
form.add(new BasicNameValuePair("next", ""));

answered May 03 '18 at 03:59

Aristofanio Garcia

1,103
8
13

Hmm I see do you by any chance know how to generate a csrf middleware token ? – Bob Miller May 03 '18 at 04:04
I recommend that do a crawl before of start this requisition. Generate the same value in client-side and server-side is too small probable. – Aristofanio Garcia May 03 '18 at 04:08
More information about csrf: https://stackoverflow.com/questions/1805838/csrf-token-generation – Aristofanio Garcia May 03 '18 at 04:10
Is it even possible to grab the csrf token from the form? – Bob Miller May 03 '18 at 04:26
yes! A way is to do the first request only to get csrf value using regex. After continue with your code – Aristofanio Garcia May 03 '18 at 04:30
everytime I send a request the server will generate a new csrf token – Bob Miller May 03 '18 at 04:39

Java HttpClient accessing image with session id

1 Answers1