用 postman 学 cURL

不用 postman 也能学, 但用 postman 更简单.

目标

目标很简单, 也很明确, 能够使用 cURL 发送常用的 GET, POST, DELETE, PATCH 请求.

方法

首先打开 postman, 在地址栏输入 https://requestb.in/s437tns4. 这是我从 https://requestb.in/ 临时生成的一个 url, 可以用来接受并显示我们的 request. 它就像一个回声, 你 ping 它就 pong.

点击发送, 有:

看到已经返回了状态码 200 以及 ok.

到 request bin 刷新一下, 可以看到刚才从 postman 发出的请求:

下面用 cURL 来做同样的事. 点击 postman 右上角的 code, 可以看到这个 request 在多种语言的代码, 我们选择 cURL, 得到代码:

curl -X GET \
  https://requestb.in/s437tns4 \
  -H 'cache-control: no-cache' \
  -H 'postman-token: 5b7cd4ba-3dd2-f7e6-d793-c6a1aef2f36e'

在 shell 下发送这个请求:

再去 request bin 刷新一下, 收到了第二个请求!

截了这么久的图... 现在我们学到了三个知识点:

curl 的一般格式是 curl <一个url>
用 -X GET 指定 request 类型位 GET 请求 (An HTTP Method (verb))
用 -H 'key=value' 指定 header 键值对

实践

过程你懂了. 现在把 postman 的 GET 换成 POST, 得到 cURL 代码:

curl -X POST \
  https://requestb.in/s437tns4 \
  -H 'cache-control: no-cache' \
  -H 'postman-token: a645c3f7-fe70-3e2a-213e-5651826cd735'

再刷新 request bin 页面, 得到一个 post 请求:

但你啥东西都没有 post 啊, 我们给 body 加上点文本:

curl -X POST \
  https://requestb.in/s437tns4 \
  -H 'cache-control: no-cache' \
  -H 'postman-token: f5cdd615-db24-0add-d278-8928560b1313' \
  -d '{
   "ping": "pong"
}'

哒哒, 收到了数据:

现在, 我们很确定 -X 后面指定的是 request 方法. 还学到了加 payload 的方法: -d '<字符串>'. (这个 -d 是 --data 的意思.)

The request body can be in multiple formats. These formats are defined by the MIME type of the request. The MIME Type can be set using the Content-Type HTTP header. The most commonly used MIME types are:

multipart/form-data
application/x-www-form-urlencoded
application/json

有几种 post:

POST Raw Text: -d 'string'
POST Form Data: -d 'foo=bar&foo2=baz'

再多一点实践

form data

curl -X PATCH \
  https://requestb.in/s437tns4 \
  -H 'cache-control: no-cache' \
  -H 'content-type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW' \
  -H 'postman-token: 17a4727a-cfbd-8ec3-e139-e484270158b2' \
  -F ping=pong

哈哈, 我居然是 patch 的一个 form data... 好像哪里不对.

form url encoded

curl -X POST \
  https://requestb.in/s437tns4 \
  -H 'cache-control: no-cache' \
  -H 'content-type: application/x-www-form-urlencoded' \
  -H 'postman-token: 1b1ccc0d-e3a4-73ed-366c-b9d30dc9238c' \
  -d '%E6%88%91%E6%98%AF=%E8%B0%81%3F&Who-Am=I'

看看 request bin 收到的 request:

再举一个例子:

HTML 里的这样一个 POST

<form method="POST" action="junk.cgi">
    <input type=text name="birthyear">
    <input type=submit name=press value=" OK ">
</form>

等价于

curl --data "birthyear=1905&press=%20OK%20"  \
    http://www.example.com/when.cgi

This kind of POST will use the Content-Type application/x-www-form-urlencoded and is the most widely used POST kind.

这个 %20 很常见, 是空格键, 看 ASCII 表就知道.

现在的 cURL 可以不用手工转义:

curl --data-urlencode "name=I am Daniel" \
    http://www.example.com

params

curl -X GET \
  'https://requestb.in/s437tns4?%E6%88%91=%E6%98%AF%E8%B0%81&Who=am-I' \
  -H 'cache-control: no-cache' \
  -H 'postman-token: 1be0f58e-fa8b-9a1e-79e4-2dbae11f14f7' \
  -d '%E6%88%91%E6%98%AF=%E8%B0%81%3F&Who-Am=I'

再看再学把. postman 虽然好用, 但实在是太卡了! 所以要 GET cURL.

文件上传

post form-data:

选两个文件上传

收到的 request

注意到上面最后一个 boundry 后面还有两个 --.

对应的 cURL:

curl -X POST \
  https://requestb.in/yx5thyyx \
  -H 'cache-control: no-cache' \
  -H 'content-type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW' \
  -H 'postman-token: 8a19e97d-2cac-2783-402e-b0a1b17f048b' \
  -F filekey1=@/private/tmp/file1 \
  -F filekey2=@/private/tmp/file2.json

那个 boundry 是个随机的.

put file:

Perhaps the best way to upload data to a HTTP server is to use PUT. Then again, this of course requires that someone put a program or script on the server end that knows how to receive a HTTP PUT stream.

试了一下和 post 看上去没啥区别.

其他

用 referer 来看人家傻不傻:

A HTTP request may include a 'referer' field (yes it is misspelled, 哈哈, 就是拼错了), which can be used to tell from which URL the client got to this particular resource. Some programs/scripts check the referer field of requests to verify that this wasn't arriving from an external site or an unknown page. While this is a stupid way to check something so easily forged, many scripts still do it. Using curl, you can put anything you want in the referer-field and thus more easily be able to fool the server into serving your request.

Use curl to set the referer field with:

curl --referer http://www.example.come \
    http://www.example.com

user agent:

--user-agent, 还是看傻不傻.

TODO

更多实例.

Notes

mulitple requests: curl -I http://example.com --next http://example.com

PUT

The HTTP PUT request method is similar to HTTP POST. It too is meant to transfer data to a server (and elicit a response). What data is returned depends on the implementation of the server.

A PUT request can pass parameters to the server using "Query String Parameters", as well as the Request Body. For example, in the following raw HTTP request,

PUT /hi/there?hand=wave

PATCH

The HTTP PATCH method is used to update resources on a server. The exact use of PATCH requests depends on the server in question. There are a number of server implementations which handle PATCH differently. Technically, PATCH supports both Query String parameters and a Request Body.

references

用 postman 学 cURL