Tuesday, April 15, 2014

Dealing with HttpOnly cookies in Windows Phone 8

The way we have to pass cookies from one response to another request is by using the CookieContainer class. That also work for HttpOnly cookies which are stored inside the CookieContainer but they are never exposed publicly. If you set the same instance of that CookieContainer to the next request it will set the hidden cookie there (as long as the request is made to the same site the cookie specifies).

That’s ok until you need to serialize and deserialize the CookieContainer because you are restoring state in your phone application. As the HttpOnly cookie is keep in private fields the default serialization behavior doesn’t persist that data and on deserializing to the new CookieContainer instance the hidden cookie is gone.

The solution for that would be going one level down and use Sockets directly for that request, read the raw request as a string, extract the cookie and set it to the next requests. Thankfully there a new library part of the Windows 8 API for dealing with Sockets (Windows.Networking.Sockets) which leverage the latest asynchronous features of the .NET Framework (async, await).

Here's the code for using Sockets in Windows Phone 8 and getting the response as a string:
public class TcpClient : ITcpClient
    public async Task<string> Send(Uri requestUri, string request)
        //connect to host
        var socket = new StreamSocket();
        var hostname = new HostName(requestUri.Host);
        await socket.ConnectAsync(hostname, requestUri.Port.ToString());

        //send the request 
        var writer = new DataWriter(socket.OutputStream);
        await writer.StoreAsync();

        //read the response
        var reader = new DataReader(socket.InputStream) 
                          InputStreamOptions = InputStreamOptions.Partial 
        var count = await reader.LoadAsync(512);
        if (count > 0)
            return reader.ReadString(count);
        return null;

And here’s an example of using that class:
var responseString = await TcpClient.Send(requestUri, GetStringRequest());
var cookieValue = ParseCookieFromString(responseString);
//set the cookieValue to CookieContainer as a not HttpOnly cookie.
private string GetStringRequest()
    return string.Format(@"POST {0} HTTP/1.1
Accept: application/json
Content-Length: {1}
Accept-Encoding: identity
Referer: http://myreferer.com
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
User-Agent: NativeHost
Host: {2}
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
{3}", yourRequestURL, yourRequestContentLenght, yourRequestHost, yourRequestContent);


  1. Hello Ajadex,

    Thank you for your code.
    I don't understand the ITcpClient class part. I delete the " : ITcpClient" part. And use it as

    TcpClient tc = new TcpClient();
    var responseString = tc.Send(requestUri, GetStringRequest());

    but I get bad request in the count. Is my change cause this or my target requestUrl doesn't support Socket connection.

    Best Regards,

  2. Ngoài dịch vụ ship và order hàng nhật. Chúng tôi còn nhận chuyển hàng từ nhật về hà nội nhận chuyển hàng từ nhật về tphcm với chi phí cực kì rẻ. Và đặc biệt free ship tại các khu vực trong thành phố và thủ đô khi hàng về tới Việt Nam. Chúng tôi còn tạo điều kiện cho các doanh nghiệp có thể nhập khẩu hàng hóa từ nhật bản để kinh doanh với mức chi phí nhận chuyển hàng từ nhật bản về việt nam hoặc order hàng từ nhật về việt nam rất rẻ
    Từ lâu nay, dịch vụ order hàng nhật đang và đã được nhiều khách hàng sử dụng. Với độ tin cậy, chi phí thấp được sự ung hộ và giới thiệu của rất nhiều khách hàng.
    Ngoài ra chúng tôi còn nhận mua hộ hàng nhật mua hàng trên web nhật gửi về Việt Nam với chi phí thấp. Hy vọng dịch vụ chuyển đồ từ nhật về việt nam sẽ được nhiều người yêu thích. Cùng nhau mua sắm với fado - mua hàng trên amazon ship về việt nam , từng bừng trong những ngày tết.

  3. The computerized phone was produced around 2004 for the benefactor showcase. free-lookup.net

  4. This comment has been removed by the author.

  5. You can design your trek by simply experiencing the advancements and arrangements on your smartphone, rather than visiting a movement office or investing energy looking into on the web. localiser un portable

  6. In addition, people are also downloading music on their mobile phones these days. Modern SIM cards allow users to store large amounts of data without worrying about the lack of storage capacity.https://www.techpally.com/phone-scanner-tech/