roam/aweber/20210210113027-control_panel_http_requests.org

Control Panel HTTP Requests

• Cookies
• AJAX Requests
• Logging In
  • Fetching a CSRF Token
  • Sending credentials

Cookies

Name	Description
AUTORESPSID	Session ID

Cookies for requests in this document are stored in cookie file by curl in ~/.cookies (https://curl.se/docs/http-cookies.html).

AJAX Requests

Control Panel controller actions that expect to be called as AJAX endpoints expect the X-Requested-With header to be present and set to XMLHttpRequest.

Logging In

Fetching a CSRF Token

  GET localhost:8080/users/pub/csrf
  X-Requested-With:XMLHttpRequest

63116e764c5d31cdd3e4f230ee3740527f6eb1c76aea1cb04e30da5d68e24d78

Sending credentials

  POST localhost:8080/users/account/loginAjax
  X-Requested-With: XMLHttpRequest

  username=lookatme@example.com&password=testing&_csrf=${csrf}

{"submitStatus":{"code":200,"message":"\/users\/","category":"status_success"},"validationErrors":[]}