Скачать или смотреть How to Implement Authorization on Your Android App Using OkHttp

Discover how to effectively implement `authorization` for your Android application using `OkHttp`. This guide explores solving issues related to web session management and cookie handling effectively while authenticating with your required API.
---
This video is based on the question https://stackoverflow.com/q/62314905/ asked by the user 'Kudryashov' ( https://stackoverflow.com/u/13724169/ ) and on the answer https://stackoverflow.com/a/62348692/ provided by the user 'Kudryashov' ( https://stackoverflow.com/u/13724169/ ) at 'Stack Overflow' website. Thanks to these great users and Stackexchange community for their contributions.

Visit these links for original content and any more details, such as alternate solutions, latest updates/developments on topic, comments, revision history etc. For example, the original title of the Question was: Authorization on the site using OkHttp

Also, Content (except music) licensed under CC BY-SA https://meta.stackexchange.com/help/l...
The original Question post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license, and the original Answer post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license.

If anything seems off to you, please feel free to write me at vlogize [AT] gmail [DOT] com.
---
Understanding Authorization with OkHttp

In modern application development, especially when working with web services and APIs, proper authorization is a crucial aspect that cannot be overlooked. Recently, a developer faced challenges authenticating with their university's website using OkHttp, a popular HTTP & HTTP/2 client for Android. They had a working solution in Python but struggled when porting the solution to Android.

The Problem: Unsuccessful Authentication

The developer’s attempt to send requests to authenticate (accessing the URL https://lk.sut.ru/cabinet/lib/autenti...) resulted in an error. The issues came to light when implementing the code, leading to repeated redirections without successful authorization.

Key Challenges:

Encountering error cases where the onFailure callback was triggered.

The Python code worked seamlessly, but people using OkHttp ran into issues, hinting at a possible session management oversight.

The error trace provided indicated potential problems with too many follow-up requests occurring because of redirection loops, leading to an inability to authenticate.

The developer suspected missing components related to creating a valid web session.

The Solution: Implementing Cookie Management

Upon deeper investigation, it became clear that proper session management was key to resolving the issue. The insertion of specific lines of code helped maintain session state and prevent excessive redirects.

Key Addition to Code:

Here’s what the developer did to solve the problem:

[[See Video to Reveal this Text or Code Snippet]]

Explanation of Code Additions:

Cookie Management: The ClearableCookieJar maintains cookies that are necessary for the session. The PersistentCookieJar allows these cookies to be retained across app sessions, providing continuous authentication.

Handling Redirects: Setting .followRedirects(false) and .followSslRedirects(false) prevents OkHttp from automatically following redirects. This circumvents potential loops in situations where the server response is misconfigured or leads to a redirection that would otherwise never stabilize.

Benefits of the Solution:

Keeps Track of Authentication: By properly managing cookies, the application can authenticate successfully without losing any session information.

Prevents Redirect Loops: Removing automatic redirects allows for more granular control over the request-response cycle, preventing situations where the application gets stuck in an endless loop.

Increased Stability: Applications become less prone to network issues leading to hardened and stable interactions with API endpoints.

Conclusion

The journey to successfully authenticating through an Android application using OkHttp can be challenging, particularly when transitioning from other programming languages like Python. However, understanding session management and utilizing persistent cookies effectively solves many common issues found in API authorization.

If you ever find yourself in a similar situation, remember to examine how your application handles HTTP sessions and redirects. You'll likely find that a few simple adjustments will lead to success in your authorization attempts.

With this new knowledge, developers can confidently implement authentication in their Android applications using OkHttp.