https dialog

[Ulrich Schmidt]

Hello NG,

I'm looking for a while for doc's to understand how to delelop my own
https client to automate some tasks.
The website, I try to use for example, contains a javasript to provide
for login (URL: https://www.cortalconsors.de/euroWebDe/-).
I've attached the part of the code which is supplies the login fields
(probably easier to read when browsing the source code of the page).
I've no idea, how the POST should look like to do the login.

Any help is appreciated. Is there any literature I can read to get a
understanding of running a https-session with a own (Java)-programmed
client.

=========================================================================
<td valign="top" class="login">
<div class="login">
<script src="parts/content/content.js" type="text/javascript"></script>
<form
action="/euroWebDe/-;jsessionid=GqL2n4hXxlsDHpcfQTp1FtMyYcYnqrvz4kyJM8HyDnrp4d13CXGy!-732185349"
method="post" name="Home.login-status.visitor">
Kontonummer/UserID<input class="field" name="userId" style="width:
11em;" id="id468417253_userId"><br>
PIN/Passwort<input type='password' autocomplete='off' class="field"
name="nip" style="width: 11em;" id="id468417253_nip"><br>
<input name="$$event_loginStatusLogin" type="image"
src="images/euroPort/design/de/buttons/btxl_login.gif" title="Login"
class="form-button"><br>
<a
href="/euroWebDe/-;jsessionid=GqL2n4hXxlsDHpcfQTp1FtMyYcYnqrvz4kyJM8HyDnrp4d13CXGy!-732185349?$part=Home.login-status.visitor&$event=forwardToAccountOpening"
class="form-field">Konto er&ouml;ffnen</a>
/
<a_href="/euroWebDe/-;jsessionid=.....$part=Home.login-status.visitor&$event=forwardToSecurityHint"
class="form-field">Sicherheitshinweis</a><br>
<input type="hidden" name="$part" value="Home.login-status.visitor" >
</form>
</div>
</td>
=======================================================================================================

Ulrich

 

[VK]

I'm looking for a while for doc's to understand how to delelop my own
https client to automate some tasks.

I'm not sure what do you mean by "https client to automate some
tasks". Will it be running on server or on client? For the latter for
JavaScript there is no difference where to submit() form data - by
HTTP or by HTTPS.

The website, I try to use for example, contains a javasript to provide
for login (URL:https://www.cortalconsors.de/euroWebDe/-).
I've attached the part of the code which is supplies the login fields
(probably easier to read when browsing the source code of the page).
I've no idea, how the POST should look like to do the login.

document.forms['Home.login-status.visitor'].submit();

 

[Ulrich Schmidt]

I'm not sure what do you mean by "https client to automate some
tasks". Will it be running on server or on client? For the latter for
JavaScript there is no difference where to submit() form data - by
HTTP or by HTTPS.

I want to write a java-client to "negotiate" with given webservers. I
want to replace the browser by my own program to automatically, what I'm
ought to do with my firefox. I want to retrieve special infos from a
list of pages and for some I need to do a login.
Retrieving data w/o login is not a problem, but I don't know and can't
find the syntax how to issue commands to do the login.
In this very sample I found by trace, that firefox issues the commands:
GET parts/content/content.js HTTP/1.0
Accept: */*
Accept-Language: de-de,en-us;q=0.8,en;q=0.5,de-at;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive

I did this trace by copying the login-html-code from the page source to
a webserver. Though I don't have the script parts/content/content.js, I
don't know how to go further - and cannot trace mor data.
It would be helpful to be able to trace the browser; but a sniffer won't
help much because of the https-connection.

Ulrich

 

[VK]

I want to write a java-client to "negotiate" with given webservers.

If you want java-client then ask at comp.lang.java.help

JavaScript !== Java

 

[Ulrich Schmidt]

JavaScript !== Java

I know this. My question wasn't about java programming but about
http-protocol, html and javascript. I thought that people in this NG
might know about this.

 

[VK]

JavaScript !== Java

I know this.

If you do then why are you saying "java-client" with Javascript in
mind? It is like saying "- I need a PHP script (written in Perl of
course)". It is not pin-pointing from my side: both Java and
Javascript allow to write applications to communicate with server,
many times people mixes the language names while asking - so it is
normal to double check.

My question wasn't about java programming but about
http-protocol, html and javascript. I thought that people in this NG
might know about this.

They do and they will be glad to help I'm sure. It is just not clear
why are bothering with the low-level HTTP communication and especially
with HTTPS mechanics is you are making Javascript-client. Javascript
doesn't let to access local certificate store and to manually encrypt
data to send. As I said in my first post for say ajaxoid or plain old
submit() / iframe it is equal whether to POST http or https page - the
internal UA blocks will take care of it. For you it is the same
MyAJAX.open('POST', myURL, true);

Take a look to http://www.ajaxtoolbox.com and say that is missing in
the functionality you are seeking. That may be quicker than go by
question/answer.

 

[Ulrich Schmidt]

If you do then why are you saying "java-client" with Javascript in
mind? It is like saying "- I need a PHP script (written in Perl of
course)". It is not pin-pointing from my side: both Java and
Javascript allow to write applications to communicate with server,
many times people mixes the language names while asking - so it is
normal to double check.

I had asked previously at a java group, but could not get help. I don't
want to use javascript for my task. I just wanted to find out the
http-commands I need to do the logon.

They do and they will be glad to help I'm sure. It is just not clear
why are bothering with the low-level HTTP communication and especially
with HTTPS mechanics is you are making Javascript-client. Javascript
doesn't let to access local certificate store and to manually encrypt
data to send. As I said in my first post for say ajaxoid or plain old
submit() / iframe it is equal whether to POST http or https page - the
internal UA blocks will take care of it. For you it is the same
MyAJAX.open('POST', myURL, true);

It's not just for using the low level http, though I'd like to
understand more of it. I couldn't really figure out what I need to
specify, to do the login; which fields with which values have to be
posted. In the meantime I found the hpptLiveHeader-plugin for firefox to
trace the commandflow - and its very helpful. But I'm still looking for
a "compendium" to get the whole picture. Just googeling is very time
consuming and I've got not much leisure-time to learn about this.