如何使用HttpClient带Bearer令牌以XML参数请求并获取XML响应

原可正常工作的RestSharp实现 #

Payload定义：

XElement Payload = <Access><AppID>35</AppID><UserToken>QrEil9L9S</UserToken></Access>

实现代码：

public string PostFromRest(string API_URL, string subURL, string bearerToken, XElement Payload)
{
    var client = new RestClient(API_URL);
    var request = new RestRequest(subURL, Method.Post);
    request.AddHeader("Cache-Control", "no-cache");
    request.AddHeader("Content-Type", "application/xml");
    request.AddHeader("Accept", "application/xml");
    request.AddHeader("messageType", "REQUEST");
    request.AddHeader("Authorization", bearerToken);
    request.AddHeader("messageId", Guid.NewGuid().ToString());
    request.AddHeader("timestamp", DateTime.Now.ToString());
    request.AddXmlBody(Payload, ContentType.Xml);
    var response = client.Execute(request);
    return response.Content;
}

原HttpClient尝试的问题分析 #

1. 第一种尝试错误点

   • 错误地将请求头参数用FormUrlEncodedContent作为表单数据发送，而非设置到请求头中
   • AuthenticationHeaderValue构造逻辑错误：第一个参数应为认证方案（如Bearer），而非Authorization

2. 第二种尝试错误点

   • Content-Type属于内容头，不能添加到request.Headers，需由请求内容对象（如StringContent）负责设置
   • 若bearerToken未包含Bearer 前缀，会导致认证失败

正确的HttpClient实现 #

public async Task<string> PostWithHttpClient(string API_URL, string subURL, string bearerToken, XElement payload)
{
    // 建议HttpClient全局复用，不要每次请求都实例化
    using var client = new HttpClient();
    client.BaseAddress = new Uri(API_URL);

    // 设置通用请求头
    client.DefaultRequestHeaders.CacheControl = new CacheControlHeaderValue { NoCache = true };
    client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/xml"));
    client.DefaultRequestHeaders.Add("messageType", "REQUEST");
    client.DefaultRequestHeaders.Add("messageId", Guid.NewGuid().ToString());
    client.DefaultRequestHeaders.Add("timestamp", DateTime.Now.ToString());
    
    // 处理Authorization头：确保格式正确
    if (!bearerToken.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
    {
        bearerToken = $"Bearer {bearerToken}";
    }
    client.DefaultRequestHeaders.Authorization = AuthenticationHeaderValue.Parse(bearerToken);

    // 构造XML请求内容
    var xmlContent = new StringContent(payload.ToString(), Encoding.UTF8, "application/xml");

    // 发送异步POST请求
    using var response = await client.PostAsync(subURL, xmlContent);
    response.EnsureSuccessStatusCode(); // 可选：抛出HTTP错误状态码异常

    // 读取XML响应内容
    return await response.Content.ReadAsStringAsync();
}

关键注意事项 #

• HttpClient复用：避免每次请求新建实例，建议全局单例或通过IHttpClientFactory注入使用
• 请求头分类：Content-Type是内容专属头，必须通过请求内容对象设置，不能添加到请求的通用头集合
• Bearer令牌格式：确保令牌字符串包含Bearer 前缀，或在代码中自动补充该前缀
• 异步调用：优先使用await而非.Result，避免线程阻塞和死锁风险

内容的提问来源于stack exchange，提问作者Ildar