What *exact* url in the API sets cloud data

Dylan5797

MegaApuTurkUltra wrote:
jokebookservice1 wrote:
projectId - doesn't this make it redundant…?
It is redundant but necessary. Without the projectId cookie, Scratch will reject your request.

Really? It seems to work on scratchapi without a projectId cookie.

jokebookservice1

Can I have some help?

import urllib2 as u
data = {"username" : "jokebookservice1", "projectId" : "..", "etc." : "etc."}
cookies = {"X-CSRFToken" : "[Sensored - security vulnerability]", "scratchsessionid" : "...", "etc." : "etc."}
r = u.Request("https://scratch.mit.edu/varserver")
r.add_header("Referer", "http://scratch.mit.edu")
#Now, urllib2 doesn't have urlencode as far as I am aware, so how do I convert dict -> string/bytes/?
r.urlopen(r)

Dylan5797

jokebookservice1 wrote:

Can I have some help?

import urllib2 as u
data = {"username" : "jokebookservice1", "projectId" : "..", "etc." : "etc."}
cookies = {"X-CSRFToken" : "[Sensored - security vulnerability]", "scratchsessionid" : "...", "etc." : "etc."}
r = u.Request("https://scratch.mit.edu/varserver")
r.add_header("Referer", "http://scratch.mit.edu")
#Now, urllib2 doesn't have urlencode as far as I am aware, so how do I convert dict -> string/bytes/?
r.urlopen(r)

You are confused about the cookie names.

CSRF Token Cookie  : scratchcsrftoken
Sessions ID Cookie : scratchsessionsid
CSRF Token Header  : X-CSRFToken

jokebookservice1

How would I send a POST request including headers, cookies and an address? (Just in general)

MegaApuTurkUltra

Dylan5797 wrote:
MegaApuTurkUltra wrote:
jokebookservice1 wrote:
projectId - doesn't this make it redundant…?
It is redundant but necessary. Without the projectId cookie, Scratch will reject your request.
Really? It seems to work on scratchapi without a projectId cookie.

It was a while ago the last time I played with the http api. Maybe the ST removed the requirement?

$(".box-head")[0].textContent = "committing AT crimes since $whenever"

jokebookservice1

Wait, is X-CSRFToken != scratchcsrftoken

and if not, where do I get the former?

BTW: Thanks for all the help everybody

MegaApuTurkUltra

jokebookservice1 wrote:
Wait, is X-CSRFToken != scratchcsrftoken

and if not, where do I get the former?

BTW: Thanks for all the help everybody

They should be the same thing.

Scratch likes to change the cookie a lot so make sure you're sending the right value (what was most recently set) as X-CSRFToken

$(".box-head")[0].textContent = "committing AT crimes since $whenever"

jokebookservice1

MegaApuTurkUltra wrote:
jokebookservice1 wrote:
Wait, is X-CSRFToken != scratchcsrftoken

and if not, where do I get the former?

BTW: Thanks for all the help everybody
They should be the same thing.

Scratch likes to change the cookie a lot so make sure you're sending the right value (what was most recently set) as X-CSRFToken

Ok. I'll do my best, I'll have a go at making a request from the browser by inspecting the element

Discuss Scratch