android - GAE 无法识别 Cookie？

Question

我正在研究 GAE 和 Android，试图获得为网络服务制作的应用程序。我正在执行从 Android 上的 AccountManager 获取身份验证 token 的步骤，根据需要获取 Cookie，然后将该 cookie 附加到 GAE python 应用程序处理的 GET 请求。由于某种原因，GAE 应用程序似乎无法识别 cookie 或其他东西。抱歉发了这么大的帖子，我想我会在这里得到尽可能多的代码来帮助解释。

我在 GAE 中有这个基本类来测试用户是否被识别。

class TestUser(webapp.RequestHandler):
  def get(self):
    if users.get_current_user():
        self.response.out.write(users.get_current_user().nickname())
    else:
        self.response.out.write('no user')

application = webapp.WSGIApplication([
  ('/', MainPage),
  ('/testuser', TestUser)
], debug=True)

def main():
  run_wsgi_app(application)

if __name__ == '__main__':
  main()

在浏览器中，这很好用。我看到了用户。在 Android 上执行时，我得到“无用户”。

这是一堆Android代码:

创建时:

@Override
    public void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);
        setContentView(R.layout.main);

        cookieLength = (TextView)findViewById(R.id.cookielength);

        cookie = "";        

        AccountManager manager = AccountManager.get(getApplicationContext());
        Account[] accounts = manager.getAccountsByType("com.google"); 
        new GetAuthTokenTask().execute(accounts);
    }

获取授权 token ，使其失效，然后再次获取以避免 token 过期:

private class GetAuthTokenTask extends AsyncTask<Account, Object, String> {

    @Override
    protected String doInBackground(Account... accounts) {
        AccountManager manager = AccountManager.get(getApplicationContext());
        Account account = accounts[0];
        String token = this.buildToken(manager, account);
        Log.d(TAG, "First token: "+token);
        manager.invalidateAuthToken(account.type, token);
        return this.buildToken(manager, account);
    }

    private String buildToken(AccountManager manager, Account account) {
        try {
            AccountManagerFuture<Bundle> future = manager.getAuthToken (account, "ah", false, null, null);
            Bundle bundle = future.getResult();
            return bundle.getString(AccountManager.KEY_AUTHTOKEN);
         } catch (OperationCanceledException e) {
                Log.w(TAG, e.getMessage());
         } catch (AuthenticatorException e) {
                Log.w(TAG, e.getMessage());
         } catch (IOException e) {
                Log.w(TAG, e.getMessage());
         }
         return null;
    }

    protected void onPostExecute(String authToken) {
        Log.d(TAG, "Second token: "+authToken);
        getCookie(authToken);
    }
}

获取用户的cookie，保存在全局cookie字符串中。

private void getCookie(final String authToken) {
    new Thread(new Runnable() {
        public void run() {
            String href = "https://someawesomeapp.appspot.com/_ah/login?continue=http://localhost/&auth="+authToken;
            Log.d(TAG, "href: "+href);

            DefaultHttpClient httpclient = new DefaultHttpClient();
            final HttpParams params = new BasicHttpParams();
            HttpClientParams.setRedirecting(params, false);
            httpclient.setParams(params);
            HttpGet httpget = new HttpGet(href);
            try {
                    HttpResponse response = httpclient.execute(httpget);
                    HttpEntity entity = response.getEntity();
                    if (entity != null) {
                        entity.consumeContent();
                    }
                    List<Cookie> cookies = httpclient.getCookieStore().getCookies();
                    Log.d(TAG, "Cookies");
                    if (cookies.isEmpty()) {
                        Log.d(TAG, "None");
                    } else {
                        for (int i = 0; i < cookies.size(); i++) {
                            Log.d(TAG, "- " + cookies.get(i).toString());
                            Cookie c = cookies.get(i);
                            Log.d(TAG, "cookie.getname(): "+c.getName());
                            if (c.getName().contentEquals("SACSID")) {
                                Log.d(TAG, "Found SACSID cookie");
                                cookie = c.getValue();
                                Log.d(TAG, "cookie now set to: "+cookie);
                            }
                        }
                    }
                } catch (ClientProtocolException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
                } catch (IOException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
                }

        }
    }).start();
}

我们现在已经存储了一个 cookie，用户在界面中按下了测试用户按钮，这被执行:

公共(public)无效测试用户( View View ){ Log.d(TAG, "testUser()");

String href = "http://someawesomeapp.appspot.com/testuser";


DefaultHttpClient httpclient = new DefaultHttpClient();
    final HttpParams params = new BasicHttpParams();
    HttpClientParams.setRedirecting(params, false);
    httpclient.setParams(params);
    HttpGet httpget = new HttpGet(href);
    httpget.setHeader("Cookie", cookie);
    try {
        HttpResponse response = httpclient.execute(httpget);
        StatusLine status = response.getStatusLine();
        if (status.getStatusCode() != 200) {
            throw new IOException("Invalid response from server: " + status.toString());
        }
        HttpEntity entity = response.getEntity();
        if (entity != null) {
            //entity.consumeContent();
            InputStream inputStream = entity.getContent();
            ByteArrayOutputStream content = new ByteArrayOutputStream();

            // Read response into a buffered stream
            int readBytes = 0;
            byte[] sBuffer = new byte[512];
            while ((readBytes = inputStream.read(sBuffer)) != -1) {
                content.write(sBuffer, 0, readBytes);
            }
            String dataAsString = new String(content.toByteArray());
            Log.d(TAG, "response: "+dataAsString);
        }

    } catch (ClientProtocolException e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    } catch (IOException e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    }

这是来自 WireShark 的连接嗅探:

GET /testuser HTTP/1.1
Cookie: AJKiYcEcp6zZHFUoNU5KVlEII_wcWzlBoRQpo-KQ0T_4lwoo0znXn6t7oKpmpa7ctaVY58GO5BmwxkSZ4yZ-e7EOuwTZxeGAuKwI2YrisqjnNuQB36wuzlyBfdY6c7ECcVXuu7BNYlYJtDoB7zJDUCeSXfBmGzrfSh3fHmVO56C540aRmwZKoftRB0ejkdLB6PhUGRXcBI2rbFdvKwuNKJqB0XIr8W_zcEo9AuMjBQqXkDqDUIaGn_ehKfw9c99kzw8cJNHx1EKxVL5Tc2QIYjXWnzTJAYscITCq6IiTTNSdfzWrkbK6Ys9ZOBYNqooaAOxHM5Urx7Cgg0jo2nWQ-tNyKSHfa9Ur7IxBkp137hW7Ar5pimJYb8Jd8oZGwB4uzNHV5V5yZs9aKCqXcaQoz0wgmT5FjT-zqcGz-JfMpGTeubgPg-tQjSvhwPB6mBaXWsOOyuyZPxNeFFDh51WEv53wQs_5fdTwGQ7rQ7ZTEfoBPZNA-JNfo3ecy54DQMmhflmL_IzGE__pNToBi02WlERFm0LclPXtKm4SsDXfTfMPWAve2W1wp-mP-bwB4PljC6NP98WLPWGizRw7g2NwQ_y0iWIogIq9ag
Host: someawesomeapp.appspot.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Vary: Accept-Encoding
Date: Sun, 13 Nov 2011 17:42:34 GMT
Server: Google Frontend
Transfer-Encoding: chunked

7
no user
0

此处的响应是来自 GAE 的“No User”。关于如何让 GAE 作为用户接受 cookie 并采取行动，有什么想法吗？

27 秒后，我想我发现了一个问题。这是浏览器的嗅探，我没有 ACSID= 部分。

Cookie: ACSID=AJKiYcFeUHZUP56a

感谢您的帮助!
有状态

编辑:我修好了。我需要等待一段时间才能回答我自己的问题，但声誉不够。基本上，由于我使用 SSL 获取 cookie，因此 cookie 需要以 SACSID 而不是 ACSID 作为前缀，并且 testuser url 也需要是 https，因为这是我们正在使用的 cookie。

Answer 1

我修好了。对于其他拔头发的人:

当您使用 SSL 发送获取 cookie 的请求时，响应将以 SACSID 为前缀，否则将以 ACSID 为前缀。

在 HTTP 请求中，我将 cookie 添加更改为:

httpget.setHeader("Cookie", "SACSID="+cookie);

而且，由于这是 S cookie，我必须这样通过 SSL 发送请求: