Python 请求：CSRF 令牌丢失或不正确

debugcn 发表于 Dev

阿基莱什·乔贝

我有一个简单的 HTML 页面，我试图在其中使用requests.post(); 但是，Bad Request 400. CSRF token missing or incorrect即使我通过 URL 编码传递它，我仍然收到。请帮忙。

url = "https://recruitment.advarisk.com/tests/scraping"

res = requests.get(url)

tree = etree.HTML(res.content)
csrf = tree.xpath('//input[@name="csrf_token"]/@value')[0]

postData = dict(csrf_token=csrf, ward=wardName)
print(postData)
postUrl = urllib.parse.quote(csrf)

formData = dict(csrf_token=postUrl, ward=wardName)
print(formData)
headers = {'referer': url, 'content-type': 'application/x-www-form-urlencoded', 'user-agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36'}
page = requests.post(url, data=formData, headers=headers)
return page.content

小D

您已确保requests在一个会话中，以便csrf_token将匹配：

import sys
import requests

wardName = "DHANLAXMICOMPLEX"

url = 'https://recruitment.advarisk.com/tests/scraping'

#make the requests in one session
client = requests.session()
# Retrieve the CSRF token first
tree = etree.HTML(client.get(url).content)
csrf = tree.xpath('//input[@name="csrf_token"]/@value')[0]
#form data
formData = dict(csrf_token=csrf, ward=wardName)
headers = {'referer': url, 'content-type': 'application/x-www-form-urlencoded', 'user-agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36'}
#use same session client
r = client.post(url, data=formData, headers=headers)
print r.content

它将为您提供带有结果数据表的 html。

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。