API:Login/zh

在使用MediaWiki的web服务API时，您可能需要让您的应用程序或客户端程序登录. 这个过程由提交登录请求，构建一个cookie，再通过与返回的确认令牌一起重新提交登录请求来完成.

是否要登录
在以下情况下您的客户程序需要登录以进行操作：
 * 它需要获取某些信息或执行一项操作，而这种操作仅限一些有特定权限的用户执行；
 * 它需要执行大的请求，这样的请求受到限制而变得低效，而为了消除限制就需要作为有特定权限的用户登录

在允许匿名编辑的wiki上，不登录就可以编辑；但我们强烈推荐您先登录. 在非开放wiki上，使用任何API功能都需要登录.

如果您的客户端程序是用JavaScript编写的，它通常会作为运行它的用户的登录凭据执行操作. 这种情况下，您就不需要通过web服务API登录了：您只需要保证用户已经通过web界面登录了.

应用程序专有的用户帐号
为您的应用程序创建专有的用户帐号很有好处，如果您的应用程序：
 * 执行自动编辑或其他大量操作；
 * 执行大的或性能昂贵的请求

如果您的应用程序拥有一个单独的帐号，那么它作出的修改就很容易被追踪，并且它的帐号可以被赋予特殊的权限（通常是"bot"用户组）. 有些wiki有关于自动编辑的方针，或一个处理"bot"用户组的请求的过程.

登录之后，您会获得一些令牌. 服务器依赖它们来识别已登录的用户. 您必须在每一个对api.php的调用中传递由登录请求所设置的cookie. 这些cookie可以保留约一个月. 所以程序每次运行时，可以都先检查一下之前的登录是否过期，如果过期了再重新登录.

如何登录
如果您要通过API登录，您需要提交登录请求并构建一个cookie（许多应用程序框架比如PHP的cURL会自动构建这个cookie）. 在MediaWiki 1.15.3+中，您必须通过与返回的令牌一起再次提交登录请求来确认登录.

登录请求的结构
这个请求还会在HTTP头中返回一个会话cookie（ ）. 您需要在接下来的请求中加入这个cookie（许多应用程序框架会自动处理cookie）. sessionid参数是在MediaWiki 1.17及之后的版本中加入的. 注意如果MediaWiki返回的不是XML而是HTML，那么您需要提供一个format=xml参数.

如果您使用认证插件如Extension:LDAP Authentication，您可能需要加入请求参数 ，包含您认证的域名.

确认令牌
如果请求的结果是  而不是  ,你可以跳过这个步骤. (这个额外的步骤添加自 MediaWiki 1.15.3.) In MediaWiki 1.15.4, first phase of login in ApiLogin.php is broken, so login/sessionid parameter is not returned, thus 令牌 confirmation is impossible. Apply ApiLogin.php file from MediaWiki 1.15.5 to your installation as a quick workaround, even better to upgrade to 1.15.5. ApiLogin.php from MediaWiki 1.16+ is incompatible with MediaWiki 1.15.3+.

Construct cookies
一个成功的  request will set session cookies. 许多应用程序框架比如cURL的cookiejar会自动构建这个cookie; 如果没有，你就得手动创建了.

如果您的维基运行 CentralAuth拓展, you can construct them from the data returned as follows:


 * In the example above, you'd set the following cookie from the first request and send it for the second request:
 * enwiki_session =  (from the HTTP cookie  )
 * Additionally, you have to set after logged in sucessfully:
 * enwikiUserName =  (from the   field)
 * enwikiUserID =  (from the   field)
 * enwikiToken =  (from the   field)


 * Note that the  part is different for every wiki, and is returned in the   field.

When CentralAuth is enabled, as on Wikimedia wikis, the above method will only work on a single wiki. If you would like to use the advantages of Single-User-Login to be logged in on all wikis, the only usable option is to also parse the  headers manually and create additional cookies, instead of just accepting the cookies that it sets (which only sets them for the single wiki)

CentralAuth SUL Login
In the case of Wikimedia the cookie should be duplicated and added for following domains:
 * Login in as usual.
 * From the headers (especially from the second reponse) accept the cookies that it wants to set (typically there are 6 cookies being set. For example on Wikimedia Commons:  and   ). This part is usually covered by frameworks such as cURL with a cookiejar.
 * Now you have to parse the cookie by looking for the centralauth_ cookies and adding additional entries for all other wikis that centralauth covers in your setup.
 * .wikipedia.org
 * .meta.wikimedia.org
 * .wiktionary.org
 * .wikibooks.org
 * .wikiquote.org
 * .wikisource.org
 * .commons.wikimedia.org
 * .wikinews.org
 * .wikiversity.org
 * .mediawiki.org
 * .species.wikimedia.org

Errors
错误会呈现在 域中. 可能的取值有:
 * 您在请求中没有设置.
 * You provided an illegal username
 * The username you provided doesn't exist
 * 您没有设置.
 * 您提供的密码错误.
 * 和 相同, returned when an authentication plugin rather than MediaWiki itself rejected the password
 * The wiki tried to automatically create a new account for you, but your IP address has been blocked from account creation
 * 您不能短时间内多次登录. See also throttling
 * 用户被封禁
 * 登录功能必须需要POST请求.
 * Either you did not provide the login 令牌 or the sessionid cookie. Request again with the  and cookie given in this response
 * 和 相同, returned when an authentication plugin rather than MediaWiki itself rejected the password
 * The wiki tried to automatically create a new account for you, but your IP address has been blocked from account creation
 * 您不能短时间内多次登录. See also throttling
 * 用户被封禁
 * 登录功能必须需要POST请求.
 * Either you did not provide the login 令牌 or the sessionid cookie. Request again with the  and cookie given in this response
 * 用户被封禁
 * 登录功能必须需要POST请求.
 * Either you did not provide the login 令牌 or the sessionid cookie. Request again with the  and cookie given in this response
 * Either you did not provide the login 令牌 or the sessionid cookie. Request again with the  and cookie given in this response
 * Either you did not provide the login 令牌 or the sessionid cookie. Request again with the  and cookie given in this response

Throttling
For security reasons, this module is throttled. By default, you get to login 5 times in 300 seconds, but this may vary from one wiki to another. When you exceed this limit, your login will fail (even if it's otherwise correct) with  and the number of seconds you need to wait in the   field.

例子

 * 用PHP登录的例子 (要求Snoopy)
 * 用PHP登录的例子(使用cURL) - 不需要Snoopy