我正在尝试从此网址中提取数据,但我遇到了一些问题。为什么这会在NSJSONSerialization
行崩溃?有没有更好的方法从这个网站下载信息?
NSString *url=@"https://api.p04.simcity.com/simcity/rest/users/search/J3d1.json";
NSURLRequest *theRequest = [NSURLRequest requestWithURL:[NSURL URLWithString:url]];
NSURLResponse *resp = nil;
NSError *err = nil;
NSData *response = [NSURLConnection sendSynchronousRequest: theRequest returningResponse: &resp error: &err];
NSDictionary *jsonArray = [NSJSONSerialization JSONObjectWithData: response options: NSJSONReadingMutableContainers error: &err];
NSLog(@"%@",jsonArray);
作为参考,JSON是:
{
"users": [
{
"uri": "/rest/user/20624",
"tutorialState": 0,
"nucleusId": 20624,
"id": 20624,
"screenName": "R3DEYEJ3D1",
"lastLogin": 1362666027000,
"isOnline": "true",
"avatarImage": "https://api.p04.simcity.com/simcity/rest/user/20624/avatar",
"cities_count": 0,
"canChat": "true"
},
{
"uri": "/rest/user/46326",
"tutorialState": 0,
"nucleusId": 46326,
"id": 46326,
"screenName": "J3D1_WARR10R",
"lastLogin": 1363336534000,
"isOnline": "false",
"avatarImage": "https://api.p04.simcity.com/simcity/rest/user/46326/avatar",
"cities_count": 0,
"canChat": "true"
}
]
}
答案 0 :(得分:3)
您的服务器正在提供一个不受操作系统信任的证书 - 我必须使用-k
标志来curl
您的JSON,所以应该早些想到这个。
为了解决这个问题,您需要切换到使用异步NSURLConnection
并实现其委托方法。请参阅this stack overflow question中的此答案,以实现解析问题的可行解决方案。我在app委托中实现了它,但你可以把它放在异步NSOperation
中并在那里使用它。
警告:此代码将连接到任何服务器,无论信任程度如何。这是要求中间人进攻的人。启用此类信任时,请勿向服务器发送敏感信息。您必须实现代码以验证服务器的身份,并将if (YES)
中的- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge
替换为对该检查结果的测试。
我目前的理解是,这应该通过将您的证书的公钥作为DER文件包含在应用程序包中,并使用SecCertificateCreateWithData
创建将用作输入的SecCertficiateRef
来完成。 SecTrustSetAnchorCertificates
。然后,SecTrustEvaluate
应该用于验证身份。我根据Certificate, Key, and Trust Services Reference和this blog post中有关如何信任您自己的证书的示例代码阅读此理解。
@interface AppDelegate () <NSURLConnectionDelegate, NSURLConnectionDataDelegate>
// This is needed to collect the response as it comes back from the server
@property (nonatomic, strong) NSMutableData *mutableResponseData;
@end
@implementation AppDelegate
- (BOOL)application:(UIApplication *)application didFinishLaunchingWithOptions:(NSDictionary *)launchOptions
{
// Xcode template code for setting up window, ignore...
self.window = [[UIWindow alloc] initWithFrame:[[UIScreen mainScreen] bounds]];
// Override point for customization after application launch.
if ([[UIDevice currentDevice] userInterfaceIdiom] == UIUserInterfaceIdiomPhone) {
self.viewController = [[ViewController alloc] initWithNibName:@"ViewController_iPhone" bundle:nil];
} else {
self.viewController = [[ViewController alloc] initWithNibName:@"ViewController_iPad" bundle:nil];
}
self.window.rootViewController = self.viewController;
[self.window makeKeyAndVisible];
// Instantiate our connection
NSString *urlString = @"https://api.p04.simcity.com/simcity/rest/users/search/J3d1.json";
NSURL *url = [NSURL URLWithString:urlString];
NSURLRequest *request = [NSURLRequest requestWithURL:url];
if(![NSURLConnection connectionWithRequest:request delegate:self]) {
NSLog(@"Handle an error case here.");
}
return YES;
}
- (void)connection:(NSURLConnection *)connection didReceiveResponse:(NSURLResponse *)response
{
// Prepare to recevie data from the connection
NSLog(@"did receive response: %@", response);
self.mutableResponseData = [NSMutableData data];
}
- (void)connection:(NSURLConnection *)connection didFailWithError:(NSError *)error
{
// Handle an error case here
NSLog(@"did fail with error: %@", error);
}
- (void)connection:(NSURLConnection *)connection didReceiveData:(NSData *)data
{
// Build up the response data
[self.mutableResponseData appendData:data];
}
- (void)connectionDidFinishLoading:(NSURLConnection *)connection
{
NSError *error = nil;
id JSONObject = [NSJSONSerialization JSONObjectWithData:self.mutableResponseData options: NSJSONReadingMutableContainers error:&error];
if (!JSONObject) {
// Handle error here
NSLog(@"error with JSON object");
}
else if ([JSONObject isKindOfClass:[NSDictionary class]]) {
//we're in business
NSDictionary *dict = JSONObject;
NSLog(@"dict is %@", dict);
}
else {
// Handle case of other root JSON object class...
}
}
// The following two methods allow any credential to be used. THIS IS VULNERABLE TO MAN IN THE MIDDLE ATTACK IN ITS CURRENT FORM
- (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace
{
return [protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust];
}
- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge
{
if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) {
// WE ARE POTENTIALLY TRUSTING ANY CERTIFICATE HERE. Replace YES with verification of YOUR server's identity to avoid man in the middle attack.
// FOR ALL THAT'S GOOD DON'T SHIP THIS CODE
#warning Seriously, don't ship this.
if (YES) {
[challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
}
}
[challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge];
}
@end
答案 1 :(得分:0)
如果数据为零,则NSJSONSerialization将始终崩溃。您需要输入条件以查看该URL是否包含任何数据。
答案 2 :(得分:0)
尝试将url放在浏览器中以确保为您提供有效的JSON,同时确保解析的数据为Array或NSDictionary