API:Checktoken

GET 请求 检查来自tokens 模块的令牌的有效性。 仅当请求来自令牌所有者时它才有效，第三方不能使用它来检查令牌的有效性，因为您必须使用诸如Extension:Third party session verification 之类的扩展。

MediaWiki版本：

≥ 1.25

API帮助文档

action=checktoken

(main | checktoken)

• This module requires read rights.
• Source: MediaWiki
• License: GPL-2.0-or-later

Check the validity of a token from action=query&meta=tokens.

• https://www.mediawiki.org/wiki/Special:MyLanguage/API:Checktoken

Specific parameters:

Other general parameters are available.

type

Type of token being tested.

This parameter is required.

One of the following values: createaccount, csrf, deleteglobalaccount, login, patrol, rollback, setglobalaccountstatus, userrights, watch

token

Token to test.

This parameter is required.

maxtokenage

Maximum allowed age of the token, in seconds.

Type: integer

Example:

Test the validity of a csrf token.

api.php?action=checktoken&type=csrf&token=123ABC [open in sandbox]

示例

GET请求

检查CSRF令牌。

api.php?action=checktoken&type=csrf&token=123ABC&format=json [在Api沙盒中尝试]

回应

{
    "checktoken": {
        "result": "invalid"
    }
}

示例代码

Python

#!/usr/bin/python3

"""
    check_token.py

    MediaWiki API Demos
    Demo of `Checktoken` module: Check a CSRF token.

    MIT License
"""

import requests

S = requests.Session()

URL = "https://en.wikipedia.org/w/api.php"

PARAMS = {
    "action": "checktoken",
    "token": "123ABC",
    "type": "csrf",
    "format": "json"
}

R = S.get(url=URL, params=PARAMS)
DATA = R.json()

print(DATA)

PHP

<?php
/*
    check_token.php

    MediaWiki API Demos
    Demo of `Checktoken` module: Check a CSRF token.

    MIT License
*/

$endPoint = "https://en.wikipedia.org/w/api.php";
$params = [
    "action" => "checktoken",
    "token" => "123ABC",
    "type" => "csrf",
    "format" => "json"
];

$url = $endPoint . "?" . http_build_query( $params );

$ch = curl_init( $url );
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );
$output = curl_exec( $ch );
curl_close( $ch );

echo( $output );

JavaScript

/*
    check_token.js

    MediaWiki API Demos
    Demo of `Checktoken` module: Check a CSRF token.

    MIT License
*/

var url = "https://en.wikipedia.org/w/api.php"; 

var params = {
    action: "checktoken",
    token: "123ABC",
    type: "csrf",
    format: "json"
};

url = url + "?origin=*";
Object.keys(params).forEach(function(key){url += "&" + key + "=" + params[key];});

fetch(url)
    .then(function(response){return response.json();})
    .then(function(response) {console.log(response);})
    .catch(function(error){console.log(error);});

MediaWiki JS

/*
	check_token.js

	MediaWiki API Demos
	Demo of `Checktoken` module: Check a CSRF token.

	MIT License
*/

var params = {
		action: 'checktoken',
		token: '123ABC',
		type: 'csrf',
		format: 'json'
	},
	api = new mw.Api();

api.get( params ).done( function ( data ) {
	console.log( data );
} );

可能的错误

代码	信息
notoken	token参数必须被设置。
notype	type参数必须被设置。
unknown_type	无法识别的参数type的值：###。