使用 shopify API 时，服务器为 url 返回 HTTP 响应代码：401

Question

我的 url shopify 给出的是这种格式
https://apikey:password@hostname/admin/orders.json 因此，当尝试使用 HttpURLConnection 获取订单时，出现 401 未授权错误。这是我的代码

import java.io.*;
import java.net.*;
import java.util.Properties;

/**
 * Created by admin on 22/8/15.
 */
public class Hello {

   // This method should be removed in production
    static void setProxy(){
        Properties systemProperties = System.getProperties();
        systemProperties.setProperty("http.proxyHost","lotus");
        systemProperties.setProperty("http.proxyPort", "8080");
    }
    public static void main(String [] args)
    {
        try
        {

            setProxy();
            URL url = new URL("https://apikey:password@go-frugal.myshopify.com/admin/orders.json");
            HttpURLConnection connection = (HttpURLConnection) url.openConnection();
            connection.setRequestMethod("GET");
            connection.setRequestProperty("user-agent","Mozilla/5.0");
            connection.setRequestProperty("Content-Type","application/json");
            BufferedReader in = new BufferedReader(
                    new InputStreamReader(connection.getInputStream()));
            String urlString = "";
            String current;
            while((current = in.readLine()) != null)
            {
                urlString += current;
            }
            System.out.println(urlString);
        }catch(IOException e)
        {
            e.printStackTrace();
        }

    }
}

这里是错误

java.io.IOException: Server returned HTTP response code: 401 for URL: https://apikey:password@go-frugal.myshopify.com/admin/orders.json
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1313)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
    at Hello.main(Hello.java:27)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.intellij.rt.execution.application.AppMain.main(AppMain.java:140)

Process finished with exit code 0<br>

getErrorStream returns 这个

{"errors":"[API] Invalid API key or access token (unrecognized login or wrong password)"}

Answer 1

试试这个...你的调用顺序是错误的。希望这有帮助。

import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import java.net.URLConnection;

import org.jboss.util.Base64;

public class test9 {

public static void main(String[] args) {
    URL url;
    URLConnection urlConn = null;
    HttpURLConnection htcon = null;
    InputStream is = null;
    StringBuffer sb = new StringBuffer();
    String authStr = "apikey:password";

    String authStringEnc = Base64.encodeBytes(authStr.getBytes());

    //String authStringEnc = new String(Base64Encoder.encode(authString.getBytes()));
    try {
        url = new URL("https:go-frugal.myshopify.com/admin/orders.json");
        urlConn = url.openConnection();
        urlConn.setRequestProperty("Authorization", "Basic " +  authStringEnc);
        urlConn.setRequestMethod("GET");
                urlConn.setRequestProperty("user-agent","Mozilla/5.0");
                urlConn.setRequestProperty("Content-Type","application/json");

        htcon = (HttpURLConnection) urlConn;
        is = htcon.getInputStream();
        InputStreamReader isr = new InputStreamReader(is);

        int numCharsRead;
        char[] charArray = new char[1024];

        while ((numCharsRead = isr.read(charArray)) > 0) {
            sb.append(charArray, 0, numCharsRead);
        }   

        System.out.println("sb: "+sb);
    } catch (IOException e) {
        e.printStackTrace();
    }
}

}

Answer 2

这是对 Java 在连接级别处理授权的方式的疏忽。我花了很长时间调试；它在浏览器中有效，那么为什么它在 Java 中无效？

事实证明，网络浏览器会自动为任何带有用户信息 space 的 URL 编码授权令牌。 Java默认情况下不会这样做，所以你必须自己做：

URI uri = new URL("http://username:password@protected.domain.example/resource").toURI();

String userInfo = uri.getRawUserInfo();
if(userInfo != null && userInfo.length() > 0)
    userInfo = Base64.getEncoder().encodeToString(userInfo.getBytes());

HttpURLConnection connection = (HttpURLConnection) uri.toURL().openConnection();
if(userInfo != null && userInfo.length() > 0)
    connection.setRequestProperty("Authorization", "Basic " + userInfo);
connection.connect();

一些注意事项：

您可以尝试使用 URL#getUserInfo() 或 URI#getUserInfo()，但它可能无法正确编码包含合法特殊字符的密码。
这应该适用于所有 HTTP URL，即使它们没有用户信息段。

使用 shopify API 时，服务器为 url 返回 HTTP 响应代码：401

Server returned HTTP response code: 401 for url when using shopify API

java

shopify