From 5d885ce2f0bae55047a88a366fa365a0f1767e1a Mon Sep 17 00:00:00 2001
From: Hykilpikonna <me@hydev.org>
Date: Wed, 9 Mar 2022 22:02:58 -0500
Subject: [PATCH] [F] Fix SJP login

---
 .../veracross/sdk/StJohnsHttpClient.java      | 23 +++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

diff --git a/src/main/java/org/hydev/veracross/sdk/StJohnsHttpClient.java b/src/main/java/org/hydev/veracross/sdk/StJohnsHttpClient.java
index c582c6f..957cc6b 100644
--- a/src/main/java/org/hydev/veracross/sdk/StJohnsHttpClient.java
+++ b/src/main/java/org/hydev/veracross/sdk/StJohnsHttpClient.java
@@ -33,6 +33,20 @@ public class StJohnsHttpClient extends GeneralHttpClient
 
     private String username;
 
+    /**
+     * Get the session's authenticity token
+     *
+     * @return CSRF token
+     */
+    public String getCsrf() throws IOException
+    {
+        // Exmaple response: <input name="authenticity_token" type="hidden" value="oLeYfaLYmQDScdhx9fR5jpgvyjBXDCC36NTvfIjkBkgrsyCxA+KO71Du9n1MvJqNbjRK1R+HCl4OlmGlrpqRSg==">
+        String response = getBody("https://www.stjohnsprep.org/fs/sessions/user/csrf-token");
+
+        // Example CSRF Token: oLeYfaLYmQDScdhx9fR5jpgvyjBXDCC36NTvfIjkBkgrsyCxA+KO71Du9n1MvJqNbjRK1R+HCl4OlmGlrpqRSg==
+        return response.substring(response.indexOf("value=\"") + 7, response.indexOf("\">"));
+    }
+
     /**
      * Login and save the session
      */
@@ -42,10 +56,11 @@ public void login(String username, String password) throws IOException, Veracros
         this.username = username;
 
         // Post request
-        CloseableHttpResponse response = postForm("https://www.stjohnsprep.org/userlogin.cfm?do=login&p=114", null,
-                        "username", username,
-                        "password", password,
-                        "submit", "login");
+        CloseableHttpResponse response = postForm("https://www.stjohnsprep.org/fs/auth/finalsite/callback", null,
+            "username", username,
+            "password", password,
+            "protected_page", "false",
+            "authenticity_token", getCsrf());
 
         // Get response
         int status = response.getStatusLine().getStatusCode();