POST 请求时出现 401，如何正确设置 http 服务？

Question

我在成功登录后尝试获取数据。我在后端有基于 cookie 的身份验证。我检查了登录响应，发现 cookie 存在于标题中。我不确定为什么我的请求不与 cookie 一起使用。

我在控制台中不断收到此代码，未授权代码。 I/flutter (21293): 401

class Session {
  Map<String, String> headers = {};

  Future<Map> get(String endpoint) async {
    http.Response response = await http.get(Uri.parse("$baseUrl$endpoint"), headers: headers);
    print(response.statusCode);
    updateCookie(response);
    return jsonDecode(response.body);
  }

  Future<http.Response> post(dynamic data, String endpoint) async {
    http.Response response = await http.post(Uri.parse("$baseUrl$endpoint"), body: json.decode(data), headers: headers);
    updateCookie(response);
    return response;
  }

  void updateCookie(http.Response response) {
    String? rawCookie = response.headers['set-cookie'];
    if (rawCookie != null) {
      int index = rawCookie.indexOf(';');
      headers['cookie'] =
      (index == -1) ? rawCookie : rawCookie.substring(0, index);
    }
  }
}

也尝试打印 rawCookie

I/flutter (21293): _api_key=SFMyNTY.g3QAAAABbQAAAAhpZGVudGl0eXQAAAAHZAAKX19zdHJ1Y3RfX2QAF0VsaXhpci5HYXRld2F5LklkZW50aXR5ZAAGYWN0aXZlZAAEdHJ1ZWQACWF2YXRhcl9pZG0AAAAkNTY4NWMwNTMtYThhMS00MDA5LWJhN2UtZmJkNTkyMjBhM2U1ZAAHY291bnRyeXQAAAAGZAAEZmxhZ20AAAAI8J-HtfCfh7FkAAppc29fbmFtZV8ybQAAAAJwbGQACmlzb19uYW1lXzNtAAAAA3BvbGQABG5hbWVtAAAABlBvbGFuZGQACG51bV9jb2RlbQAAAAM2MTZkAAVwb2ludHQAAAAEZAAKX19zdHJ1Y3RfX2QAEEVsaXhpci5HZW8uUG9pbnRkAAtjb29yZGluYXRlc2gCYRRhNGQACnByb3BlcnRpZXN0AAAAAGQABHNyaWRiAAAQ5mQAC2Rlc2NyaXB0aW9ubQAAAAF4ZAACaWRtAAAAJGM2ZTljY2Q0LTM4MmItNDEzZi04ODYyLTc2ZjM5ZTYxOGFiNGQABG5pY2ttAAAACHRlc3Rzc3Nz.80iQK3sUwPPVj1pkaZsKgMxQ4Lt8aW8-ndYbPSucGag; path=/; HttpOnly
I/flutter (21293): 200

那我用它

class Items{
  Future<Map> fetchItems() async {
    final response = await Session().get("/user/items");
    return response;
  }
}

Answer 1

我遇到了同样的问题。我通过使用 dio 和 cookiejar 而不是 HTTP 解决了它。

在您的pubspec.yaml 中添加这些依赖项：

dependencies:
  dio: ^4.0.4
  dio_cookie_manager: ^2.0.0
  cookie_jar: ^3.0.1

这里是一个使用 dio 的例子：

var dio =  Dio(BaseOptions(
      connectTimeout: 10000,  // in ms
      receiveTimeout: 10000,
      sendTimeout: 10000,
      responseType: ResponseType.plain,
      followRedirects: false,
      validateStatus: (status) { return true; }
  ));   // some dio configurations

dio.interceptors.add(CookieManager(CookieJar()));

Response response = await dio.post(
          "http://example.com/login",
          data: FormData.fromMap(
             {
                'username': 'myUser',
                'password': 'myPassword',
             }
          ));  // cookies are automatically saved


Response nextResponse = await dio.post("http://example.com/user/items");