fix APIClient and examples

PVE/API2Client.pm

@@ -34,6 +34,13 @@ sub delete {
     return $self->call('DELETE', $path, $param);
 }
 
+sub update_ticket {
+    my ($self, $ticket) = @_;
+
+    my $domain = "$self->{host}.local" unless  $self->{host} =~ /\./;
+    $self->{cookie_jar}->set_cookie(0, 'PVEAuthCookie', $ticket, '/', $domain);
+}
+
 sub call {
     my ($self, $method, $path, $param) = @_;
 	
@@ -54,7 +61,7 @@ sub call {
 	$uri->scheme($self->{protocol});
 	$uri->host($self->{host});
 	$uri->port($self->{port});
-	$uri->path('/api2/json/ticket');
+	$uri->path('/api2/json/access/ticket');
 
 	my $response = $ua->post($uri, { 
 	    username => $self->{username},
@@ -63,7 +70,11 @@ sub call {
 	if (!$response->is_success) {
 	    die $response->status_line . "\n";
 	}
-	# the auth cookie should be set now
+
+	my $data = from_json($response->decoded_content, {utf8 => 1, allow_nonref => 1});
+
+	$self->update_ticket($data->{data}->{ticket});
+	$self->{csrftoken} = $data->{data}->{CSRFPreventionToken};
     }
 
     my $uri = URI->new();
@@ -76,6 +87,10 @@ sub call {
 
     #print "CALL $method : " .  $uri->as_string() . "\n";
 
+    if ($self->{csrftoken}) {
+	$self->{useragent}->default_header('CSRFPreventionToken' => $self->{csrftoken});
+    }
+
     my $response;
     if ($method eq 'GET') {
 	$uri->query_form($param);
@@ -111,6 +126,7 @@ sub new {
 
     my $self = { 
 	ticket => $param{ticket},
+	csrftoken => $param{csrftoken},
 	username => $param{username},
 	password => $param{password},
 	host => $param{host} || 'localhost',
@@ -128,11 +144,7 @@ sub new {
 
     $self->{cookie_jar} = HTTP::Cookies->new (ignore_discard => 1);
 
-    if ($self->{ticket}) {
-	my $domain = "$self->{host}.local" unless  $self->{host} =~ /\./;
-	$self->{cookie_jar}->set_cookie(0, 'PVEAuthCookie', $self->{ticket},  
-					'/', $domain);
-    }
+    $self->update_ticket($self->{ticket}) if $self->{ticket};
 
     $self->{useragent} = LWP::UserAgent->new(
 	cookie_jar => $self->{cookie_jar},

bin/test/example1.pl

@@ -11,13 +11,15 @@ use Data::Dumper;
 my $hostname = PVE::INotify::read_file("hostname");
 
 # normally you use username/password,
-# but we can simply create a ticket if we are root
-my $ticket = PVE::AccessControl::assemble_ticket('root');
+# but we can simply create a ticket and CRSF token if we are root
+my $ticket = PVE::AccessControl::assemble_ticket('root@pam');
+my $csrftoken = PVE::AccessControl::assemble_csrf_prevention_token('root@pam');
 
 my $conn = PVE::API2Client->new(
-#    username => 'root',
-#    password => 'yourpassword',
+    #username => 'root@pam',
+    #password => 'yourpassword',
     ticket => $ticket,
+    csrftoken => $csrftoken,
     host => $hostname,
     );
 

bin/test/example2.pl

@@ -11,13 +11,15 @@ use Data::Dumper;
 my $hostname = PVE::INotify::read_file("hostname");
 
 # normally you use username/password,
-# but we can simply create a ticket if we are root
-my $ticket = PVE::AccessControl::assemble_ticket('root');
+# but we can simply create a ticket and CRSF token if we are root
+my $ticket = PVE::AccessControl::assemble_ticket('root@pam');
+my $csrftoken = PVE::AccessControl::assemble_csrf_prevention_token('root@pam');
 
 my $conn = PVE::API2Client->new(
-    #username => 'root',
+    #username => 'root@pam',
     #password => 'yourpassword',
     ticket => $ticket,
+    csrftoken => $csrftoken,
     host => $hostname,
     );
 

bin/test/perftest1.pl

@@ -12,7 +12,7 @@ my $hostname = PVE::INotify::read_file("hostname");
 
 # normally you use username/password,
 # but we can simply create a ticket if we are root
-my $ticket = PVE::AccessControl::assemble_ticket('root');
+my $ticket = PVE::AccessControl::assemble_ticket('root@pam');
 
 my $wcount = 4;
 my $qcount = 500;
@@ -21,7 +21,7 @@ sub test_rpc {
     my ($host) = @_;
 
     my $conn = PVE::API2Client->new(
-	#username => 'root',
+	#username => 'root@pam',
 	#password => 'yourpassword',
 	ticket => $ticket,
 	host => $host,