如何自动化Shopify站点HTTP请求实现按钮点击与结账及数据留存？

Hey there, let's break this down step by step—Shopify's checkout flow relies heavily on session persistence and proper form parameter handling, so your issue with lost form data makes total sense once you understand how it works. Here's how to fix it and automate the checkout properly:

First off, Shopify doesn't just rely on the POST data you send to remember your checkout progress—it uses session cookies tied to your browser (or HTTP client) to associate all your steps together. When you submit the contact information form, Shopify stores that data in your session, but if your next request doesn't carry the same cookies, it has no way to link the two actions.

1. Capture and Reuse Session Cookies #

The easiest way to handle this is to use a persistent HTTP session that automatically stores and sends cookies between requests. Most HTTP libraries (like Python's requests, JavaScript's axios with a cookie jar) have built-in support for this.

For example, in Python with requests:

import requests

# Initialize a persistent session (automatically handles cookies)
session = requests.Session()

# First, load the checkout page to establish a session and get necessary cookies
checkout_base_url = "http://elementalknives.com/checkout"
session.get(checkout_base_url)

# Submit your contact information with the session
contact_form_data = {
    "checkout[email]": "your-test-email@example.com",
    "checkout[shipping_address][first_name]": "Jane",
    "checkout[shipping_address][last_name]": "Doe",
    "checkout[shipping_address][address1]": "123 Main St",
    "checkout[shipping_address][city]": "Anytown",
    "checkout[shipping_address][province]": "California",
    "checkout[shipping_address][zip]": "90210",
    "checkout[shipping_address][country]": "United States",
    # Don't forget hidden fields we'll cover next!
}

# Send the contact info POST request
session.post(checkout_base_url, data=contact_form_data)

# Now send the request to move to shipping method—session carries the cookies
shipping_params = {
    "previous_step": "contact_information",
    "step": "shipping_method"
}
shipping_response = session.post(checkout_base_url, params=shipping_params)

2. Include All Required Hidden Form Fields #

Shopify adds hidden fields to checkout forms for security and session validation (like authenticity_token, checkout[id], and _method). If you omit these, Shopify will either reject your request or fail to associate your data with the session.

To get these fields:

1. Use your browser's DevTools (F12) to inspect the contact information form, or parse the checkout page HTML with a scraper like BeautifulSoup.
2. Extract the values and add them to your form data.

Example with BeautifulSoup:

from bs4 import BeautifulSoup

# Get the checkout page HTML after establishing the session
checkout_page = session.get(checkout_base_url)
soup = BeautifulSoup(checkout_page.text, "html.parser")

# Extract hidden fields
authenticity_token = soup.find("input", {"name": "authenticity_token"})["value"]
checkout_id = soup.find("input", {"name": "checkout[id]"})["value"]

# Add these to your contact_form_data
contact_form_data["authenticity_token"] = authenticity_token
contact_form_data["checkout[id]"] = checkout_id
contact_form_data["_method"] = "patch"  # This is often included in Shopify forms

3. Mimic Browser Request Headers #

Shopify might block requests that don't look like they're coming from a real browser. Copy the headers from your browser's DevTools (look under the "Request Headers" tab) and add them to your session:

session.headers.update({
    "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36",
    "Referer": checkout_base_url,
    "Accept-Language": "en-US,en;q=0.9"
})

• Test step-by-step: Manually walk through the checkout flow in your browser, recording every request's details (headers, form data, params) before automating. This avoids missing critical parameters.
• Add delays: Shopify has rate limits—add short pauses (e.g., time.sleep(2)) between requests to avoid getting your IP blocked.
• Handle redirects: Make sure your HTTP client automatically follows 302 redirects (most do by default, like requests).

内容的提问来源于stack exchange，提问作者Anullymous