Can't login to MW 1.71 - "WrongToken" - Mediawiki-api

25 Jan 2013

I'm trying to use the API in Mediawiki 1.17.  I can't get logged in.
I am getting a "WrongToken".  I think I have the right lgtoken and
session cookie, but I've never done any http programming, can anyone
tell from the sequence below what I have wrong. Probably/hopefully it's some simple
newbie mistake in not understanding how to handle a cookie or make a session not expire.

The user/password combo is able to login thru the normal interactive web interface.

Thanks

Levin
--------------------------------------------------------------------------------
Begin Attempt
--------------------------------------------------------------------------------
POST /mw/api.php HTTP/1.1
Cache-Control: no-cache
Pragma: no-cache
User-Agent: Java/1.7.0_09
Host: wiki.readytheory.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Content-type:
 application/x-www-form-urlencoded
Content-Length: 59

format=xml&action=login&lgname=mybot&lgpassword=pwd

--------------------------------------------------------------------------------
First response:
--------------------------------------------------------------------------------

HTTP/1.1 200 OK
Date: Thu, 24 Jan 2013 04:04:01 GMT
Server: Apache/2.2.23 (Amazon)
X-Powered-By: Mono
Set-Cookie: wikidb_session=8foa9hj555b6re8mri4ajd7qi3; path=/; HttpOnly
Cache-Control: private
Content-Length: 162
Connection: close
Content-Type: text/xml; charset=utf-8

<?xml version="1.0"?><api><login result="NeedToken"
token="0e8287f8976207131b153ca2acf25cfb" cookieprefix="wikidb"
sessionid="8foa9hj555b6re8mri4ajd7qi3" /></api>

--------------------------------------------------------------------------------
SECOND request with
 cookie
--------------------------------------------------------------------------------

POST /mw/api.php HTTP/1.1
Cookie: wikidb_session=8foa9hj555b6re8mri4ajd7qi3
Cache-Control: no-cache
Pragma: no-cache
User-Agent: Java/1.7.0_09
Host: wiki.readytheory.com
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Content-type: application/x-www-form-urlencoded
Content-Length: 99

format=xml&action=login&lgname=mybot&lgpassword=pwd&lgtoken=0e8287f8976207131b153ca2acf25cfb

--------------------------------------------------------------------------------
second response, where I get "WrongToken"
--------------------------------------------------------------------------------

HTTP/1.1 200 OK
Date: Thu, 24 Jan 2013 04:04:01 GMT
Server: Apache/2.2.23 (Amazon)
X-Powered-By: Mono
Cache-Control: private
Content-Length: 61
Connection:
 close
Content-Type: text/xml; charset=utf-8

<?xml version="1.0"?><api><login result="WrongToken"
/></api>