mirror of
https://github.com/copyrighttxt/watrbx-game-engine.git
synced 2026-09-05 13:17:49 +00:00
69 lines
2.4 KiB
Objective-C
69 lines
2.4 KiB
Objective-C
//
|
|
// RobloxXSRFRequest.m
|
|
// RobloxMobile
|
|
//
|
|
// Created by Ariel Lichtin on 6/25/14.
|
|
// Copyright (c) 2014 ROBLOX. All rights reserved.
|
|
//
|
|
|
|
#import "RobloxXSRFRequest.h"
|
|
#import "RobloxInfo.h"
|
|
|
|
#define XSRF_HEADER_NAME @"X-CSRF-TOKEN"
|
|
|
|
// This cached token will be valid for this only user/session for a short time frame
|
|
// TODO: Put this token behind a mutex
|
|
NSString* cachedXSRFToken;
|
|
|
|
@implementation RobloxXSRFRequest
|
|
|
|
/* XSRF Protection: Post a message that modifies the state of the server using a safety ROBLOX token */
|
|
- (AFHTTPRequestOperation *)XSRFPOST:(NSString *)URLString
|
|
parameters:(id)parameters
|
|
success:(void (^)(AFHTTPRequestOperation *operation, id responseObject))success
|
|
failure:(void (^)(AFHTTPRequestOperation *operation, NSError *error))failure
|
|
{
|
|
//set the default useragent
|
|
[self.requestSerializer setValue:[RobloxInfo getUserAgentString] forHTTPHeaderField:@"User-Agent"];
|
|
|
|
// Set the cached ROBLOX token to the request
|
|
if(cachedXSRFToken)
|
|
{
|
|
[self.requestSerializer setValue:cachedXSRFToken forHTTPHeaderField:XSRF_HEADER_NAME];
|
|
}
|
|
|
|
AFHTTPRequestOperation* operation =
|
|
[self POST:URLString parameters:parameters success:^(AFHTTPRequestOperation *operation, id responseObject)
|
|
{
|
|
// Return with success
|
|
success(operation, responseObject);
|
|
}
|
|
failure:^(AFHTTPRequestOperation *operation, NSError *error)
|
|
{
|
|
// If the status code is 403 (XSRF Token Validation Failed),
|
|
// the request should be reposted with the new token provided in the response
|
|
if(operation.response.statusCode == 403)
|
|
{
|
|
// Save the new token
|
|
NSDictionary* headerFields = operation.response.allHeaderFields;
|
|
cachedXSRFToken = headerFields[XSRF_HEADER_NAME];
|
|
|
|
// Start the request again
|
|
if (cachedXSRFToken)
|
|
[self XSRFPOST:URLString parameters:parameters success:success failure:failure];
|
|
else
|
|
failure(operation, error);
|
|
}
|
|
else
|
|
{
|
|
// The failure is for some other reason
|
|
// Return with error
|
|
failure(operation, error);
|
|
}
|
|
}];
|
|
|
|
return operation;
|
|
}
|
|
|
|
@end
|