ASP.NET使用身份验证标头将JSON数据发布到HTTP API

时间:2015-07-19 19:39:15

标签: c# json authentication asp.net-web-api http-headers

我有C#代码将JSON数据发送到web API,但我一直收到401(未授权)响应。下面的代码应该根据this function正确发出POST请求,对吗?我也尝试了相同结果的小变化。

这是发出请求的代码:

public async Task Create()
{
    using (var client = new HttpClient())
    {
        client.BaseAddress = new Uri("https://zrh.cloudsigma.com/api/2.0/");
        var testVM = new CS_VM("test");
        var auth = string.Format("{0}:{1}", "mail@mail.com", "password");
        var encoded = Convert.ToBase64String(Encoding.ASCII.GetBytes(auth));
        client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", encoded);

        HttpResponseMessage response = await client.PostAsJsonAsync("servers", testVM);
        if (response.IsSuccessStatusCode)
        {
            var a = "ok";
        }
        else
        {
            var a = "fail";
        }
    }
}

这是以JSON:

发送的类
public class CS_VM
{
    public CS_VM(string type)
    {
        if ("test" == type)
        {
            cpu = 1000;
            mem = 536870912;
            name = "testServer";
            vcn_password = "testserver";
        }
    }
    public string name { get; set; }
    public int cpu { get; set; }
    public int cores { get; set; }
    public int mem { get; set; }
    public string status { get; set; }
    public Owner owner { get; set; }
    public Uri resource_uri { get; set; }
    public string uuid { get; set; }
    public string vcn_password { get; set; }
}

请求标题:

Authorization: Basic bWFpbEBtYWlsLmNvbTpwYXNzd29yZA==

响应标题:

Transfer-Encoding: chunked
Connection: keep-alive
Vary: Cookie
X-REQUEST-ID: 2584e232-5bb2-48c0-a307-67e6c03258c0
Date: Sun, 19 Jul 2015 21:39:21 GMT
Server: cloudflare-nginx
WWW-Authenticate: Digest nonce="1437341961.55:6967:0fd0a6b2dcde8f45a5ae288c3b73ee12", realm="users", algorithm="MD5",opaque="b228739d1711b0ff025703aea82ee2a208faaaa7", qop="auth", stale="false", Basic Realm="users"
CF-RAY: 2089941a6935168e-ARN

1 个答案:

答案 0 :(得分:1)

WWW-Authenticate: Digest nonce="1437341...来看似乎是这样,这是一种摘要式身份验证。您应该从您获得的响应中构建新的授权标头。使用您关于web API链接的方法,并使用Digest Access Authentication部分。第一个401响应中给出了noncerealmqop个变量。