PHP - 如何将 X-CSRF-TOKEN 放在标题中？

Question

如何将$token或x-csrf-token 放入标头？

当我手动将x-csrf-token放在标题中时，curl 帖子有效。

我应该怎么做才能将$token或x-csrf-token自动放入标题？

当我制作一个获取令牌的新 curl 帖子并且当我将令牌自动放在标头上时，curl 的响应是404 错误请求

这是我的脚本：

$Thing = $_GET['Thing'];
$username = $_GET['username'];
$password = $_GET['password'];

$login = array(
    "cvalue" => $username,
    "ctype" => "Username",
    "password" => $password,
    "captchaToken" => $Thing,
    "captchaProvider" => "PROVIDER_ARKOSE_LABS"
);

$curl = curl_init('https://auth.roblox.com/v2/login'); // There are many links you can login from
curl_setopt_array($curl,array(
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_SSL_VERIFYPEER => true,
    CURLOPT_POSTFIELDS => json_encode($login),
    CURLOPT_HEADER => true,
    CURLOPT_CONNECTTIMEOUT => 5,
    CURLOPT_TIMEOUT => 5,
    CURLOPT_HTTPHEADER => array(
        'Content-Type: application/json; charset=utf-8',
        'Accept: application/json, text/plain, */*',
        'X-CSRF-TOKEN: '
    ),
    CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36'


));

$response = curl_exec($curl);
$size = curl_getinfo($curl,CURLINFO_HEADER_SIZE);

curl_close($curl);


#$response1 = explode(" ", $response);

#$cookie = $response1[10];
#$search = ".ROBLOSECURITY=";
#$cookie1 = str_replace($search, '', $cookie);

$headers = substr($response,0,$size);
$array = explode("\n",$headers);
foreach($array as $data){
    if(strpos($data,'csrf')){
        $info = explode(' ',$data);
        break;
    }
}

$csrf = $info[1];
$token = $csrf;
print_r($token);

print_r($response);

Answer 1

没有办法自动将自定义标头附加到所有 CURL 请求。 最好的方法是将您的 CURL 代码包装在一个函数中，并将所需的 CSRF 令牌作为参数传递。 这是一个演示：

function curl_call(array $params, string $csrf_token)
{
    ... curl code here...

    'X-CSRF-TOKEN: '. $csrf_token,

    ... remaining curl code here...
}

然后当你想发出一个 CURL 请求时，你可以像这样调用这个函数：

curl_call(['url' => '...', etc], 'csrf token string here');