Home > Back-end >  Have account and password to log in directly with a url
Have account and password to log in directly with a url

Time:10-05

Every time login enter account and password of trouble; More than one account sharing use; Don't want to tell other people the password, how to realize a link directly to login?
Website: https://jcdz.jchl.com
My idea is as follows; Get the login page by F12 and the required parameters,
https://jcdz.jchl.com/v1/edf/user/login? Account=& amp; ClearText=U2YyNjAzMzg4 & amp; IsReturnValue=https://bbs.csdn.net/topics/true&mobile=XXXXXXXX&password=XXXXXXX&remember=true&requestUrl=jcdz.jchl.com&version=v1.0.50.1867
Through this return is not login success page; But a pile of parameters,

{" token ":" 6 szn4nmt7e5lj8uiz5wnswqmy4bty0ow29fddfg5uoxxiv8hsp7w0l65sknwu8wb9vrrpswtrjh9tterglzs_g eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9. EyJzdWIiOiJbNjkxMDQ2OTA2NTU4NzcxMiwyNTYyNTg5MDk1MzUwNDAsXCIxMDUwMTU4NDc5MjAwNjY4N1wiLDExNCxcImRiXzMxX2tleV9zcHJpbmdcIiwxMDAxNDAwMSxudWxsLFwiMVwiLDI1NjI1ODkwOTUzNTA0MF0iLCJleHAiOjE1ODUyOTc4MzYsImlhdCI6MTU4NDg2NTgzNn0. ", "result" : true, "value" : {" id ": 691046906558...

I didn't paste out of the back is too long. Can see the login is successful; But why not return to normal page? Which help solve the great god, I am not a computer professional, if too profound don't understand,

CodePudding user response:

This request professional speaking, because you have only a token login is successful, and not jump to the success of the page,
, for example, now need to do pass into the community, for example, you take your id card and residence permit (equivalent to account and password) to the security room to deal with passport, id card and residence right after the security guards gave you pass (equivalent to the above {" token ":" eyJh... The content of a string), you simply pass in the security room, you are still in the outside, there is no your house into the neighbourhood (your house is equivalent to the success of the page)

CodePudding user response:

So I have to how to operate? The question has bothered me for months

CodePudding user response:

reference 1st floor timesong wind xiao xi response:
professional speaking, because of the request you received is just a token login successfully, to the success of the page does not jump,
, for example, now need to do pass into the community, for example, you take your id card and residence permit (equivalent to account and password) to the security room to deal with passport, id card and residence right after the security guards gave you pass (equivalent to the above {" token ":" eyJh... The content of a string), you are just in the security room to get a passport, you are still in the outside, there is no your house into the neighbourhood (your house is equivalent to the success of the page)

So I have to how to operate? The question has bothered me for months

CodePudding user response:

The
reference 3 floor ly2890647 response:
that I have to how to operate? The question has bothered me for months

Institute of a, login system login process, need to know the following content
(1) the login interface,
(2) a successful login the return value,
(3) the token (token) location, such as cookies or header,
(4) the jump page,
2, know the process, after writing a simulation login interface,
Simple point is to write an empty HTML interface, write the function of js code inside the
three, deploy your simulation login interface
A: register a lot or gitee, deploy your simulation on login screen (if you don't have your own web server), this means has stolen risk, after all, you need to login account and password on the simulation interface,
Method 2: this way and you use website login jump requirements of principle is through the simulation of the login interface packaged into a computer exe executable program, let share, double-click to open the way for a more safe,

CodePudding user response:

If the login is successful, that in your cookis already have a login session of success, under normal circumstances you direct access to a system instead of the url is logged in,
This is of course assuming systems use the session to verify the login,
Seems even cross domain questions, this your verification,
  • Related