smugmug.images.get is failing when site password is set

Question

I'm trying to get the images list for a gallery, calling smugmug.images.get. I'm not using OAuth, I'm including SessionID in the GET call.

I'm getting a response:

{
    code = 4;
    message = "invalid user (SitePassword)";
    method = "smugmug.images.get";
    stat = fail;
}

This occurs when a site password is set.

How do I need to authenticate this call? Thanks.

Answer 1

It sounds like you're missing the su or su (not sure which spelling is the correct one) cookie that's referenced in this thread

The su_ cookie is recent addition to assist in the prevention of sidejacking attacks. It is returned from smugmug.login.withPassword or smugmug.login.withHash requests.

After logging in, if you want subsequent calls over https this cookie needs to be present....otherwise the request will be treated as an anonymous request.