I am trying to log in to microsoft\'s sites (live.com, bing.com, etc) using POST

Question

I am trying to log in to microsoft's sites (live.com, bing.com, etc) using POST. For now, in c# because I know it best but after I figure it out I want to do it in something that will run in linux.

Anyway, the POST call includes some random things I don't understand and I don't know how to find them. I got this out of chrome:

login:MYEMAIL@EMAIL.COM
passwd:MYPASSWORD
SI:Sign in
type:11
PPFT:C.....t
PPSX:Pas
idsbho:1
sso:0
NewUser:1
LoginOptions:3
i1:0
i2:1
i3:20922
i4:0
i7:0
i12:1
i13:0
i14:62
i15:167
i17:0
i18:__Login_Strings|1,__Login_Core|1,
All of these things other than the username and password and 1's and 0' all change every time you log in. I was able to find the PPFT code in the source code of the log in page. But these other numbers (i3, i14, i15) don't show up anywhere. Surely this is something that can be interpreted on the client side, right? How can I find these?

Explanation / Answer

You are not supposed to do that. Never ask your users to write their Microsoft's credentials in your app in order for you to use those credentials to validate their account. This has serious security, privacy and probably legal implications, so unless you are developing malware intended to steal passwords, don't do it.

If you want to rely on third-party authentication for the users of your site, then OAuth is what you are searching for.

OAuth allows you

Related Questions

Navigate

• Browse (All)
• Browse I
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.