Skip to content

Commit

Permalink
Adds to documentation a note about the importance of using url-encode…
Browse files Browse the repository at this point in the history
…d forms during authentication steps.
  • Loading branch information
thomasesmith committed Oct 16, 2020
1 parent 1ad558c commit 9e27d85
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,6 +71,7 @@ content-type: application/x-www-form-urlencoded
_csrf=[CSRF]&relayState=[RELAY STATE]&email=[YOUR CAR NET EMAIL ADDRESS]&hmac=[HMAC]
```
For this one, we have to include 4 form values in the request. `_csrf`, `relayState`, and `hmac` should equal the values we just copied from the last request's response, but the `email` value should be the set to whatever email address you use to log in to your Car-Net account.
> Take note of the `content-type` header value in all of these authentication POSTs. Always use url-encoded form posts. Using multipart for these will return an error of no description. If you're getting errors here, make sure your `content-type` header value is set to `application/x-www-form-urlencoded`.
#### Response
Again, this will result in a series of `30x` redirects, but if you follow them all, it will finally settle on the form where you would be submitting your password. You again need to scrape some values from the markup of this response and grab one more value. Find this:
Expand Down

0 comments on commit 9e27d85

Please sign in to comment.