如何在Dart中实现Headless Login？Flutter应用登录失败求助

我正在开发一款Flutter应用，需要实现网站的**无头登录（Headless Login）**功能。用Python一次就成功了，但引入整个Python技术栈太麻烦，我确定这个功能完全可以用Dart实现，可试了好多次都没成功——包括检查重定向、响应状态码等方法都没用。以下是我写的Dart代码：

import 'dart:convert';
import 'package:flutter_inappwebview/flutter_inappwebview.dart';
import 'package:http/http.dart' as http;

class HeadlessLogin {
  final String username;
  final String password;

  HeadlessLogin(this.username, this.password);

  Future<bool> performLogin() async {
    final authUrl = 'https://portal.giu-uni.de';
    final authHeaders = {
      'Authorization': 'Basic ${base64Encode(utf8.encode('$username:$password'))}'
    };

    try {
      final response = await http.get(Uri.parse(authUrl), headers: authHeaders);

      if (response.statusCode == 200) {
        final cookies = response.headers['set-cookie'];
        if (cookies == null) {
          print('Failed to retrieve session cookies');
          return false;
        }

        HeadlessInAppWebView? headlessWebView;
        headlessWebView = HeadlessInAppWebView(
          initialOptions: InAppWebViewGroupOptions(
            crossPlatform: InAppWebViewOptions(
              useShouldOverrideUrlLoading: true,
              useOnLoadResource: true,
              userAgent:
              'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3',
            ),
          ),
          initialUrlRequest: URLRequest(
            url: Uri.parse(authUrl),
            headers: {
              'Cookie': cookies, // Inject session cookies
            },
          ),
          onLoadStop: (controller, url) async {
            // Check if on dashboard or other page that indicates a successful login
            final currentUrl = (await controller.getUrl())?.toString();
            if (currentUrl != null && currentUrl.contains('dashboard')) {
              print('Login successful');
              await headlessWebView?.dispose();
              return;
            } else {
              print('Redirected to unexpected page: $currentUrl');
              await headlessWebView?.dispose();
              return;
            }
          },
        );

        // Run the headless browser
        await headlessWebView.run();

        // Wait for the page to fully load
        while ((await headlessWebView.webViewController.getProgress())! < 100) {
          await Future.delayed(Duration(milliseconds: 100));
        }

        // Check the final URL
        final currentUrl = (await headlessWebView.webViewController.getUrl())?.toString();
        if (currentUrl != null && currentUrl.contains('dashboard')) {
          return true;
        } else {
          return false;
        }
      } else {
        print('Authentication failed with status code ${response.statusCode}');
        return false;
      }
    } catch (e) {
      print('Error during login: $e');
      return false;
    }
  }
}

问题排查与修复方案 #

• Cookie处理不规范：服务器返回的set-cookie可能包含多个Cookie，直接拼接注入会导致格式错误，需要拆分提取name=value部分后再用; 分隔。
• 异步逻辑冲突：onLoadStop回调中直接销毁WebView，但后续仍在等待加载进度，逻辑矛盾，建议用Completer同步登录状态。
• 认证流程不匹配：部分网站要求在WebView环境中完成表单提交或跳转验证，而非直接复用HTTP请求的Cookie，可添加表单模拟提交逻辑。

修复后的代码示例 #

import 'dart:convert';
import 'dart:async';
import 'package:flutter_inappwebview/flutter_inappwebview.dart';
import 'package:http/http.dart' as http;

class HeadlessLogin {
  final String username;
  final String password;

  HeadlessLogin(this.username, this.password);

  Future<bool> performLogin() async {
    final authUrl = 'https://portal.giu-uni.de';
    final completer = Completer<bool>();

    // 获取认证Cookie
    final authHeaders = {
      'Authorization': 'Basic ${base64Encode(utf8.encode('$username:$password'))}'
    };

    try {
      final response = await http.get(Uri.parse(authUrl), headers: authHeaders);
      if (response.statusCode != 200) {
        print('认证失败，状态码：${response.statusCode}');
        return false;
      }

      // 正确解析Set-Cookie头
      List<String> cookieList = [];
      final setCookies = response.headers['set-cookie'];
      if (setCookies != null) {
        for (var cookie in setCookies.split(',')) {
          final parts = cookie.split(';').first.trim();
          cookieList.add(parts);
        }
      } else {
        print('无法获取会话Cookie');
        return false;
      }
      final cookieHeader = cookieList.join('; ');

      // 初始化Headless WebView
      final headlessWebView = HeadlessInAppWebView(
        initialOptions: InAppWebViewGroupOptions(
          crossPlatform: InAppWebViewOptions(
            useShouldOverrideUrlLoading: true,
            debuggingEnabled: true, // 启用调试模式排查问题
            userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3',
          ),
        ),
        initialUrlRequest: URLRequest(
          url: Uri.parse(authUrl),
          headers: {'Cookie': cookieHeader},
        ),
        onLoadStop: (controller, url) async {
          final currentUrl = url?.toString();
          if (currentUrl != null && currentUrl.contains('dashboard')) {
            completer.complete(true);
          } else {
            // 检查是否需要模拟表单提交
            final html = await controller.getHtml();
            if (html.contains('username') && html.contains('password')) {
              await controller.evaluateJavascript(source: '''
                document.querySelector('input[name="username"]').value = "$username";
                document.querySelector('input[name="password"]').value = "$password";
                document.querySelector('form').submit();
              ''');
              return;
            }
            completer.complete(false);
          }
          await headlessWebView.dispose();
        },
        onLoadError: (controller, url, code, message) {
          print('加载错误：$message');
          completer.complete(false);
          headlessWebView.dispose();
        },
      );

      await headlessWebView.run();
      return completer.future;
    } catch (e) {
      print('登录过程出错：$e');
      return false;
    }
  }
}

额外建议 #

• 启用WebView调试模式，查看控制台日志定位具体失败原因。
• 检查目标网站是否需要CSRF令牌、特定请求头等额外参数。
• 若网站依赖JavaScript渲染认证流程，必须通过WebView完成全流程，而非仅用http库请求。

内容的提问来源于stack exchange，提问作者abtlb