Web Session Manager icon

Web Session Manager

Authenticate to websites and manage session cookies automatically

Make Authenticated Request

AI-generated

Summary

Make an HTTP request to a specified URL using stored session cookies for authentication, optionally sending custom headers and request body with support for automatic session re-authentication and CSRF token handling.

Inputs

  • Request URL (required) — The URL to send the authenticated request to.
  • Method (required) — HTTP method to use for the request (GET, POST, PUT, DELETE, PATCH).
  • Send Headers — Toggle to include additional custom headers in the request.
  • Headers — Custom key-value pairs for HTTP headers, sent if 'Send Headers' is enabled.
  • Send Body — Enable sending a request body (only for POST, PUT, PATCH methods).
  • Body Content Type — Format of the request body: JSON, form-data, or raw string.
  • Body — Raw string content for the request body when 'Body Content Type' is raw.
  • JSON Body — JSON object to send as the request body when 'Body Content Type' is JSON.
  • Form Data — Key-value fields to send as URL-encoded form data when 'Body Content Type' is form-data.
  • Include Response Headers — Whether to include response headers in the operation's output.
  • Enable CSRF Handling — Automatically fetch and include a CSRF token in the request if enabled.
  • CSRF Token Selector — Custom CSS selector or meta name to identify the CSRF token on the page when CSRF handling is enabled.
  • CSRF Token Field Name — Form field name to send the CSRF token under when CSRF handling is enabled.
  • Auto Refresh Session — Automatically re-authenticate if the session expires before making the request.
  • Max Retry Attempts — Maximum number of login retry attempts upon session expiration when Auto Refresh is enabled.
  • Request Timeout — Timeout in seconds for the HTTP request.

Output shape

a single JSON object with request success status, HTTP status code, response body (parsed if JSON), optionally response headers, and session information including authentication status and valid cookie count.

On unauthorized responses (401, 403), the node will automatically attempt re-authentication based on retry settings if enabled. Throws errors for request failures otherwise. Response body is parsed as JSON if possible; otherwise returned as raw text. Session cookies are updated automatically from response Set-Cookie headers.

Discussion