自动获取并维护connect.sid Cookie实现API请求认证问题

我正在开发一款应用，需要调用指定端点完成认证以获取connect.sid Cookie，后续每次POST数据时都要使用该Cookie。手动登录获取Cookie并填入请求能正常运行，但这个Cookie在若干次请求后会过期，部署后这会成为严重问题。我希望实现以下自动流程：

• 请求获取Cookie
• 若Cookie仍有效则复用，无效则重新获取后再执行请求

以下是手动可行的请求代码及尝试过的RestSharp认证代码：

手动可行的请求代码 #

var url = "https:abcd";
var httpRequest = (HttpWebRequest)WebRequest.Create(url);
httpRequest.Method = "POST";
httpRequest.Headers["Cookie"] = "connect.sid=s%3AhM62pU-YeAJFQxlNuFxYS76Fy8keCzbO.rECFaOPEiK%2FoVDzbMQjXyYlNsuT0UEew%2FWGlC4An%2FZY"; //value of the cookies
httpRequest.ContentType = "application/json";

using (var streamWriter = new StreamWriter(httpRequest.GetRequestStream()))
{
    streamWriter.Write(carrierjson);
}
var httpResponse = (HttpWebResponse)httpRequest.GetResponse();
using (var streamReader = new StreamReader(httpResponse.GetResponseStream()))
{
    var result = streamReader.ReadToEnd();
}
HttpStatusCode statusCode;
statusCode = httpResponse.StatusCode;
if (statusCode == HttpStatusCode.OK)
{
    //somecode here
}

尝试过但未生效的RestSharp认证代码 #

//REST API RestSharp but not working

var client = new RestClient("https://xxxxxxxxxxxxxx");
client.Timeout = -1;
var request = new RestRequest(Method.POST);
request.AddHeader("Content-Type", "application/json");
request.AddHeader("Accept", "application/json");
var body = @"{" + "\n" +
@"  ""username"": ""username""," + "\n" +
@"  ""password"": ""password""" + "\n" +
@"}";
request.AddParameter("application/json", body,  ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
Console.WriteLine(response.Content);

核心思路 #

1. 维护全局的connect.sid缓存，每次请求前检查缓存有效性
2. 缓存无效（或不存在）时，调用认证接口获取新Cookie并更新缓存
3. 请求失败返回401未授权时，自动触发重新认证后重试

基于RestSharp v107+的实现代码 #

using RestSharp;
using System.Net;
using System.Linq;

// 全局缓存Cookie和复用RestClient实例
private static string _connectSid;
private static readonly RestClient _restClient = new RestClient("https://你的基础域名");

// 认证获取connect.sid的方法
private static async Task<bool> AuthenticateAsync()
{
    var authRequest = new RestRequest("/你的认证端点路径", Method.Post);
    // 直接序列化对象，避免手动拼接JSON出错
    authRequest.AddJsonBody(new 
    {
        username = "你的用户名",
        password = "你的密码"
    });

    var response = await _restClient.ExecuteAsync(authRequest);
    
    // 从响应Cookie中提取connect.sid
    var targetCookie = response.Cookies.FirstOrDefault(c => c.Name == "connect.sid");
    if (targetCookie == null) return false;
    
    _connectSid = $"{targetCookie.Name}={targetCookie.Value}";
    return true;
}

// 带自动认证的POST请求方法
public static async Task<string> PostWithAuthAsync(string endpoint, object requestBody)
{
    // 无缓存Cookie时先认证
    if (string.IsNullOrEmpty(_connectSid))
    {
        bool authSuccess = await AuthenticateAsync();
        if (!authSuccess) throw new Exception("初始认证失败");
    }

    var request = new RestRequest(endpoint, Method.Post);
    request.AddHeader("Cookie", _connectSid);
    request.AddJsonBody(requestBody);
    
    var response = await _restClient.ExecuteAsync(request);
    
    // Cookie过期返回401时，重新认证后重试
    if (response.StatusCode == HttpStatusCode.Unauthorized)
    {
        bool authSuccess = await AuthenticateAsync();
        if (!authSuccess) throw new Exception("重新认证失败");
        
        // 更新Cookie后重试请求
        request.RemoveHeader("Cookie");
        request.AddHeader("Cookie", _connectSid);
        response = await _restClient.ExecuteAsync(request);
    }

    if (!response.IsSuccessful) throw new Exception($"请求失败：{response.StatusCode}");
    return response.Content;
}

简化方案：用CookieContainer自动管理会话 #

如果不想手动处理Cookie字符串，可利用RestSharp的CookieContainer自动维护会话：

using RestSharp;
using System.Net;

// 配置带Cookie容器的全局RestClient
private static readonly RestClient _restClient = new RestClient(new RestClientOptions("https://你的基础域名")
{
    CookieContainer = new CookieContainer()
});

// 简化的认证方法
private static async Task<bool> AuthenticateAsync()
{
    var authRequest = new RestRequest("/你的认证端点路径", Method.Post);
    authRequest.AddJsonBody(new 
    {
        username = "你的用户名",
        password = "你的密码"
    });

    var response = await _restClient.ExecuteAsync(authRequest);
    return response.IsSuccessful;
}

// 自动携带Cookie的请求方法
public static async Task<string> PostWithAuthAsync(string endpoint, object requestBody)
{
    var request = new RestRequest(endpoint, Method.Post);
    request.AddJsonBody(requestBody);
    
    var response = await _restClient.ExecuteAsync(request);
    
    // 401时重新认证并重试
    if (response.StatusCode == HttpStatusCode.Unauthorized)
    {
        bool authSuccess = await AuthenticateAsync();
        if (!authSuccess) throw new Exception("认证失败");
        
        response = await _restClient.ExecuteAsync(request);
    }

    if (!response.IsSuccessful) throw new Exception($"请求失败：{response.StatusCode}");
    return response.Content;
}

关键说明 #

• RestSharp版本需在v107及以上，AddJsonBody方法会自动处理JSON序列化
• 全局复用RestClient实例可提升性能，CookieContainer会自动保存和携带会话Cookie
• 401重试逻辑确保Cookie过期时自动恢复，无需手动干预

内容的提问来源于stack exchange，提问作者Master Tesh