Automate AU request by raw http requests

answered 2016-01-04 17:15:07 +0800

Virticchio
1

updated 2016-01-04 17:22:36 +0800

Hi Darksu, unfortunately I can't access web application because it's coded by our IT department and now there's no effort to implement changes to the application. The only way a small developer can do is getting by presentation layer directly.

answered 2016-01-05 18:27:11 +0800

Virticchio
1

Hello, I'm continuing to experiment and I can say that I'm on the right track. I downloaded zk framework's source code looking for the method that rise the error Illegal request: cmd required.

This error is thrown in this method

DHtmlUpdateServlet.process

when parsing command

//parse commands
        final Configuration config = wapp.getConfiguration();
        final List<AuRequest> aureqs;
        boolean keepAlive = false;
        try {
            final boolean timerKeepAlive = config.isTimerKeepAlive();
            aureqs = audec.decode(request, desktop);
            for (AuRequest aureq: aureqs) {
                final String cmdId = aureq.getCommand();
                keepAlive = !(!timerKeepAlive && Events.ON_TIMER.equals(cmdId))
                    && !"dummy".equals(cmdId);
                    //dummy is used for PollingServerPush for piggyback
                if (keepAlive)
                    break; //done
            }
        } catch (Throwable ex) {
            log.warn("", ex);
            responseError(request, response, Exceptions.getMessage(ex));
            return;
        }

        if (aureqs.isEmpty()) {
            final String errmsg = "Illegal request: cmd required";
            log.debug(errmsg);
            responseError(request, response, errmsg);
            return;
        }

Shortly, when AUDecoder returns an empty AuRequest list, error is thrown.

List<AuRequest> aureqs = audec.decode(request, desktop);
if (aureqs.isEmpty())
final String errmsg = "Illegal request: cmd required";

What I can't understand is what command is missing. My http request contains all data:

• POST data with dummy command: cmd0=dummy&dtid=z8490&opt_0=1
• All cookies

My doubt is about http header ZK-SID but looking source code doesn't seem to be determinant.

Any ideas?

Thanks, Virticchio