Thread: Log in using Apache HttpComponents

Hello guys,

I'm developing an app to do a POST log in on a server and access another page (who need logged status) to use those information.
The code:

public static void main(String[] args) throws IllegalStateException, IOException {
		SSLContext ctx = null;
		try {
			ctx = SSLContext.getInstance("TLS");
			ctx.init(new KeyManager[0], new TrustManager[] {new DefaultTrustManager()}, new SecureRandom());
 
		} catch (NoSuchAlgorithmException e) {
			e.printStackTrace();
		} catch (KeyManagementException e) {
			e.printStackTrace();
		}
 
		SSLSocketFactory sf = new SSLSocketFactory(ctx);
		Scheme httpsScheme = new Scheme("https", 443, sf);
		SchemeRegistry schemeRegistry = new SchemeRegistry();
		schemeRegistry.register(httpsScheme);
		ClientConnectionManager cm = new SingleClientConnManager(schemeRegistry);
 
		DefaultHttpClient client = new DefaultHttpClient(cm);
		client.setCookieStore(cookieStore);
 
		//POST method
		HttpPost post = new HttpPost("https://localhost/loginServlet");
 
		//Post Parameters
		List<NameValuePair> nameValuePairs = new ArrayList<NameValuePair>();
		nameValuePairs.add(new BasicNameValuePair("Username", "usertest"));
		nameValuePairs.add(new BasicNameValuePair("Password", "passtest"));
		nameValuePairs.add(new BasicNameValuePair("cmdConfirmar", "Confirmar"));
 
		post.setEntity(new UrlEncodedFormEntity(nameValuePairs, Consts.UTF_8));
 
		//Do POST
		HttpResponse response = null;
 
		try {
			response = client.execute(post);
		} catch (ClientProtocolException e) {
			e.printStackTrace();
		} catch (IOException e) {
			e.printStackTrace();
		}
 
		try {
			HttpEntity entity = response.getEntity();
 
			String body = IOUtils.toString(entity.getContent(), "UTF-8");
			System.out.println(body);
 
			EntityUtils.consume(entity);
		} catch (IOException e) {
			e.printStackTrace();
		}
 
		client.close();
}

I can submit the POST request (going through security certificates), but the servlet who redirects, tells me that i need enable cookies to log in.
Analyzing the returned headers from method, that API store the cookies in headers named "Set-Cookie", so i suppose that cookies are enabled.

Can anyone help me with that?

Originally Posted by Norm

Do you have a full class with import statements that can be compiled and executed for testing?

package javaweb;
 
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.List;
 
import javax.net.ssl.KeyManager;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
 
import org.apache.commons.io.IOUtils;
import org.apache.http.Consts;
import org.apache.http.Header;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.HttpVersion;
import org.apache.http.NameValuePair;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.client.params.ClientPNames;
import org.apache.http.client.params.CookiePolicy;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.BasicCookieStore;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.impl.conn.SingleClientConnManager;
import org.apache.http.impl.cookie.BasicClientCookie;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.params.CoreProtocolPNames;
import org.apache.http.util.EntityUtils;
 
@SuppressWarnings("deprecation")
public class LoginJavaWeb {
 
	public static void main(String[] args) throws IllegalStateException, IOException {
		SSLContext ctx = null;
		try {
			ctx = SSLContext.getInstance("TLS");
			ctx.init(new KeyManager[0], new TrustManager[] {new DefaultTrustManager()}, new SecureRandom());
 
		} catch (NoSuchAlgorithmException e) {
			e.printStackTrace();
		} catch (KeyManagementException e) {
			e.printStackTrace();
		}
 
		SSLSocketFactory sf = new SSLSocketFactory(ctx);
		Scheme httpsScheme = new Scheme("https", 443, sf);
		SchemeRegistry schemeRegistry = new SchemeRegistry();
		schemeRegistry.register(httpsScheme);
		ClientConnectionManager cm = new SingleClientConnManager(schemeRegistry);
 
		DefaultHttpClient client = new DefaultHttpClient(cm);
 
		//POST method
		HttpPost post = new HttpPost("https://localhost/loginServlet");
 
		//Post Parameters
		List<NameValuePair> nameValuePairs = new ArrayList<NameValuePair>();
		nameValuePairs.add(new BasicNameValuePair("Username", "usertest"));
		nameValuePairs.add(new BasicNameValuePair("Password", "passtest"));
		nameValuePairs.add(new BasicNameValuePair("cmdConfirmar", "Confirmar"));
 
		post.setEntity(new UrlEncodedFormEntity(nameValuePairs, Consts.UTF_8));
 
		//Do POST
		HttpResponse response = null;
 
		try {
			response = client.execute(post);
		} catch (ClientProtocolException e) {
			e.printStackTrace();
		} catch (IOException e) {
			e.printStackTrace();
		}
 
		try {
			HttpEntity entity = response.getEntity();
 
			String body = IOUtils.toString(entity.getContent(), "UTF-8");
			System.out.println(body);
 
			EntityUtils.consume(entity);
		} catch (IOException e) {
			e.printStackTrace();
		}
 
		client.close();
	}
 
	private static class DefaultTrustManager implements X509TrustManager {
 
	       public void checkClientTrusted1(X509Certificate[] xcs, String string) throws CertificateException {
	       }
 
	       public void checkServerTrusted1(X509Certificate[] xcs, String string) throws CertificateException {
	       }
 
	       public X509Certificate[] getAcceptedIssuers() {
	           return null;
	       }
 
	       public void checkClientTrusted(X509Certificate[] chain, String authType)
					throws CertificateException {
			}
 
			public void checkServerTrusted(X509Certificate[] chain, String authType)
					throws CertificateException {
			}
 
	   }
}