如何在 POST 方法中传递标头？答案

【问题标题】：How to pass the header in POST method?如何在 POST 方法中传递标头？
【发布时间】：2018-12-12 12:00:33
【问题描述】：

这里我有一个函数，我正在发送一个 POST 请求，该请求用于将客户保存在数据方中，并使用 variable_name.Header.Set() 设置带有身份验证的标头但在身体反应中，它总是会给我以下错误：-

"errors":[
     {"category":"AUTHENTICATION_ERROR",
      "code":"UNAUTHORIZED",
      "detail":"Your request did not include an `Authorization` http header with an access token. }]}

但在函数中我设置了身份验证令牌。

代码：-

func CreateCustomer(c *gin.Context) {
customer := models.Customer{}
bearer := strings.Split(c.Request.Header["Authorization"][0], "Bearer")// token pass in the postman.
bearerToken := strings.TrimSpace(bearer[1])

customerErr := json.NewDecoder(c.Request.Body).Decode(&customer)
if customerErr != nil {
    fmt.Println(customerErr)
    return
}
fmt.Println(customer)
bindData, err := json.Marshal(customer)
if err != nil {
    panic(err)
}
var jsonStr = []byte(string(bindData))
url :="https://connect.squareup.com/v2/customers"
fmt.Println(url)

req, err := http.Post(url, "application/json", bytes.NewBuffer(jsonStr))
// I used this one too.
// req.Header.Set("Authorization", "Bearer "+bearerToken)
// req.Header.Set("Accept", "application/json")
req.Header.Add("Authorization", "Bearer "+bearerToken)
req.Header.Add("Accept", "application/json")
fmt.Println(req.Header)
if err != nil {
    panic(err)
}
defer req.Body.Close()
body, _ := ioutil.ReadAll(req.Body)
fmt.Println("response Body:", string(body))
}

type Customer struct {
  GivenName    string   `json:"given_name" bson:"given_name"`
  FamilyName   string   `json:"family_name" bson:"family_name"`
  CompanyName  string   `json:"company_name" bson:"company_name"`
  Nickname     string   `json:"nickname" bson:"nickname"`
  EmailAddress string   `json:"email_address" bson:"email_address"`
  Address      Addresss `json:"address" bson:"address"`
  PhoneNumber  string   `json:"phone_number" bson:"phone_number"`
  ReferenceId  string   `json:"reference_id" bson:"reference_id"`
  Note         string   `json:"note" bson:"note"`
}

req.Header 结果是：-

map[X-Xss-Protection:[1; mode=block] 
    Keep-Alive:[timeout=60] 
    Accept:[application/json] 
    X-Permitted-Cross-Domain-Policies:[none] 
    Content-Type:[application/json] 
    Vary:[Origin, Accept-Encoding] 
    X-Content-Type-Options:[nosniff] 
    X-Download-Options:[noopen] 
    X-Frame-Options:[SAMEORIGIN] 
    Date:[Wed, 12 Dec 2018 03:41:16 GMT] 
    Strict-Transport-Security:[max-age=631152000] 
    Authorization:[Bearer YOUR_TOKEN HERE]]

谁能告诉我应该做哪些错误或在哪里进行更正才能在 Squareup 中拯救客户？

【问题讨论】：

标签： security go oauth-2.0 http-headers

【解决方案1】：

您的代码发送 POST 请求，并在处理请求后将标头添加到 response 结构：

响应，错误 := http.Post(url, "application/json", bytes.NewBuffer(jsonStr))

您应该先设置标头，然后再发送请求：

// create request
req, err := http.NewRequest("POST", url, bytes.NewBuffer(jsonStr))
if err != nil {
   panic(err)
}

// set headers
req.Header.Add("Authorization", "Bearer "+bearerToken)
req.Header.Add("Accept", "application/json")

// send request with headers
client := &http.Client{}
response, err := client.Do(req)

【讨论】：