Topic on Project:Support desk

How do I auto-login mediawiki using API login or clientlogin?

One comment • 01:38, 9 March 2019 5 years ago

1

Most guides I can find work on early than version1.27. Feeling so confuse about how to set cookies?How can I get sessionid? I also try to use clientlogin via postman, post request exactly like example on https://www.mediawiki.org/wiki/API:Login ,but result: "authmanager-authn-no-primary".

Here's my code,but didn't get login token properly. @Anomie

System Info:

Software Version

MediaWiki 1.28.2

PHP 5.6.30

MariaDB 10.1.21

<?php

namespace mediawiki;

// Start session

session_start();

/**

* How to log in mediawiki using PHP cURL?

* -------------------------------------------------

*/

//set login username password which already in your mediawiki database

$username = 'abc';

$password = '123';

//setup url

$Root = 'localhost/mediawiki';

$API_Location = "${Root}/api.php";

//setup cookie

$CookieFilePath = tempnam("/tmp", "TMP0");

$expire = 60*60*24*14 + time();

$CookiePrefix = 'theprefix';

$Domain = 'localhost';

// set variables to use in curl_setopts

$PostFields = "action=query&meta=tokens&type=login&format=json";

// first http post to sign in to MediaWiki

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL, "$API_Location");

curl_setopt($ch, CURLOPT_TIMEOUT, 500);

curl_setopt($ch, CURLOPT_HTTPHEADER, array(

'Content-Type: application/x-www-form-urlencoded',

'Content-Length: ' .strlen($PostFields))

);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

curl_setopt($ch, CURLOPT_POSTFIELDS, "$PostFields");

curl_setopt($ch, CURLOPT_POST, 1);

curl_setopt($ch, CURLOPT_COOKIEJAR, $CookieFilePath);

curl_setopt($ch, CURLOPT_COOKIEFILE, $CookieFilePath);

$Result = curl_exec($ch);

if(curl_exec($ch) === false) echo '<br>Curl error: ' . curl_error($ch).'<br>';

curl_close($ch); // curl closed

$ResultSerialized = json_decode($Result,true);

$Token = $ResultSerialized["query"]["tokens"]["logintoken"];

// cookie must be set using session id from first response

$_SESSION["logintoken"]=$Token;

//How can I get sessionid?

$sessionid=session_id();

$_SESSION["sessionid"] =$sessionid;

setcookie("${CookiePrefix}_Session",$sessionid , $expire, '/', $Domain);

setcookie("${CookiePrefix}UserName",$username,$expire,'/',$Domain);

setcookie("${CookiePrefix}Token", $_SESSION["logintoken"], $expire, '/', $Domain);

// second http post to finish sign in

$ch = curl_init();

$PostFields="action=login&lgname=${username}&lgpassword=${password}&lgtoken=${Token}&format=json";

curl_setopt($ch, CURLOPT_URL, "$API_Location");

curl_setopt($ch, CURLOPT_TIMEOUT, 500);

curl_setopt($ch, CURLOPT_HTTPHEADER, array(

'Content-Type: application/x-www-form-urlencoded',

'Content-Length: ' .strlen($PostFields))

);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

curl_setopt($ch, CURLOPT_POSTFIELDS, "$PostFields");

curl_setopt($ch, CURLOPT_POST, 1);

curl_setopt($ch, CURLOPT_COOKIE, "${CookiePrefix}_session=$sessionid");

curl_setopt($ch, CURLOPT_COOKIEJAR, $CookieFilePath);

curl_setopt($ch, CURLOPT_COOKIEFILE, $CookieFilePath);

$Result = curl_exec($ch);

if(curl_exec($ch) === false) echo '<br>Curl error: ' . curl_error($ch).'<br>';

curl_close($ch); // curl closed

$ResultSerialized = json_decode($Result,true);

// set persistent cookies

//$LgToken = $ResultSerialized["query"]["tokens"]["logintoken"];

$LgUserID = $ResultSerialized["login"]["lguserid"];

$LgUserName = $ResultSerialized["login"]["lgusername"];

$lgstatus=$ResultSerialized["login"]["result"];

var_dump($lgstatus);

setcookie("${CookiePrefix}UserName", $LgUserName, $expire, '/', $Domain);

setcookie("${CookiePrefix}UserID", $LgUserID, $expire, '/', $Domain);

//setcookie("${CookiePrefix}Token", $Token, $expire, '/', $Domain);

// Delete cURL cookie

unlink($CookieFilePath);

?>

Reference:

http://stackoverflow.com/questions/14107523/how-do-i-log-into-mediawiki-using-php-curl