Question

我正在测试https://docs.wso2.com/display/AM170/Store+APIs

中记录的API

我可以调用登录，列出应用和注销功能。但是，在呼叫退出后，我仍然可以列出我的应用程序：

登录：

$ curl -i -X POST -c cookies http://localhost:9763/store/site/blocks/user/login/ajax/login.jag -d 'action=login&username=admin&password=admin'
HTTP/1.1 200 OK
Set-Cookie: JSESSIONID=83BD02EF499EF55E566EC26B58DDA756; Path=/store/; HttpOnly
...

列出应用：

$ curl -i -b cookies   http://localhost:9763/store/site/blocks/application/application-list/ajax/application-list.jag?action=getApplications
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
...    
{"error" : false, "applications" : [{"name" : "DefaultApplication", "tier" : "Unlimited", "id" : 1, "callbackUrl" : null, "status" : "APPROVED", "description" : null}]}

注销：

$ curl -i -b cookies 'http://localhost:9763/publisher/site/blocks/user/login/ajax/login.jag?action=logout'
HTTP/1.1 200 OK
Set-Cookie: JSESSIONID=224B416DEE99F9769BB0BACD85E337E6; Path=/publisher/; HttpOnly
Content-Type: application/json;charset=UTF-8
...
{"error" : false}

列出应用：

$ curl -i -b cookies   http://localhost:9763/store/site/blocks/application/application-list/ajax/application-list.jag?action=getApplications
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
...    
{"error" : false, "applications" : [{"name" : "DefaultApplication", "tier" : "Unlimited", "id" : 1, "callbackUrl" : null, "status" : "APPROVED", "description" : null}]}

Answer 1

经过一番观察后，curl示例的文档出错了。注销的URL应为：

$ curl -i -b cookies 'http://localhost:9763/store/site/blocks/user/login/ajax/login.jag?action=logout'

文档中的网址在publisher示例的网址中显示curl！

请参阅https://docs.wso2.com/display/AM170/Store+APIs#StoreAPIs-Logout

Answer 2

更正下面的查询

curl -i -b cookies 'http://localhost:9763/store/site/blocks/user/login/ajax/login.jag?action=logout'

注销似乎无法使会话无效

2 个答案: