Microsoft Azure 应用程序网关阻止 python 的请求库

Question

I'm trying to logon into an API hosted in Azure using Python and requests is my go-to library for http requests.我正在尝试使用 Python 登录到托管在 Azure 中的 API，requests 是我用于 http 请求的首选库。 Tried this:试过这个：

import requests

url = f"https://{SERVER}/{PLATFORM}/Account/Logon"
payload = f'LicenseType=&Password={PASSWORD}&RedirectToMyselfInCaseOfError=false&RememberMe=false&UserName={USERNAME}'
headers = {
  'Content-Type': 'application/x-www-form-urlencoded',
  'Accept': 'application/json',
}

response = requests.request("POST", url, headers=headers, data=payload)
print(response.text)

but got:但得到：

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>

if I use another python library such as http.client it will work finely:如果我使用另一个 python 库，例如 http.client，它将正常工作：

import http.client

conn = http.client.HTTPSConnection(SERVER)
payload = f'LicenseType=&Password={PASSWORD}&RedirectToMyselfInCaseOfError=false&RememberMe=false&UserName={USERNAME}'
headers = {
  'Content-Type': 'application/x-www-form-urlencoded',
  'Accept': 'application/json',
}
conn.request("POST", f"/{PLATFORM}/Account/Logon", payload, headers)
res = conn.getresponse()
data = res.read()
print(data.decode("utf-8"))

Is there any way to avoid Azure to flag my "requests" lib request as malicious?有什么办法可以避免 Azure 将我的“请求”库请求标记为恶意？

Answer 1

Found the reason: Curl and Python Requests (get) reporting different http status code找到原因： Curl和Python请求（get）报不同的http状态码

Just add a User-Agent field to the headers只需在标题中添加一个 User-Agent 字段

Microsoft Azure 应用程序网关阻止 python 的请求库

问题描述

1 个解决方案

解决方案1
1 已采纳 2022-02-28 09:02:51

Microsoft Azure 应用程序网关阻止 python 的请求库

问题描述

1 个解决方案

解决方案1 1 已采纳 2022-02-28 09:02:51

解决方案1
1 已采纳 2022-02-28 09:02:51