For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Andreia's avatar
Andreia
Icon for Cirrus rankCirrus
Jan 10, 2023
Solved

iRule - Authorization Bearer / Basic

Hi everyone! I'm trying to "translate" a postman request to an iRule, however, I need help because I have no idea how to handle this in an iRule. When the request is of type BasicAuth, origin servi...
devops
  • PeteWhite's avatar
    PeteWhite
    Jan 10, 2023

    HTTP_REQUEST is in the request which goes to the backend server, HTTP_RESPONSE is for the response from the server to the client. To correct your iRule:

    when HTTP_REQUEST {
  if { [HTTP::header Authorization] contains "Basic" } {
    log local0.debug "Basic: [HTTP::header Authorization]"
    HTTP::insert X-HUB-BASIC "[HTTP::header Authorization]"
  } elseif { [HTTP::header Authorization] contains "Bearer" } {
    log local0.debug "Bearer: [HTTP::header Authorization]"
    HTTP::insert X-HUB-Bearer "[HTTP::header Authorization]"
  }
}
Andreia's avatar
Andreia
Icon for Cirrus rankCirrus
Jan 10, 2023

Hi! Thanks for the reply!
That insert wouldn't be inside the HTTP_REQUEST, would it?

  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Jan 10, 2023

    yes, it would. Presumably you want to insert the HTTP header into the request which goes to the backend server.

    • Andreia's avatar
      Andreia
      Icon for Cirrus rankCirrus
      Jan 10, 2023

      Yes, I want to insert the header inside the request which goes to the backend server. Actually I don't know if it would be in HTTP_RESPONSE or HTTP_RESPONSE_RELEASE.

      Would it be something like this?
      when HTTP_RESPONSE {
      if { [HTTP::header Authorization] contains "Basic" } {
      log local0.debug "Basic: [HTTP::header Authorization]"
      HTTP::insert X-HUB-BASIC "[HTTP::header Authorization]"
      } elseif { [HTTP::header Authorization] contains "Bearer" } {
      log local0.debug "Bearer: [HTTP::header Authorization]"
      HTTP::insert X-HUB-Bearer "[HTTP::header Authorization]"
      }
      }

      • PeteWhite's avatar
        PeteWhite
        Icon for Employee rankEmployee
        Jan 10, 2023

        HTTP_REQUEST is in the request which goes to the backend server, HTTP_RESPONSE is for the response from the server to the client. To correct your iRule:

        when HTTP_REQUEST {
  if { [HTTP::header Authorization] contains "Basic" } {
    log local0.debug "Basic: [HTTP::header Authorization]"
    HTTP::insert X-HUB-BASIC "[HTTP::header Authorization]"
  } elseif { [HTTP::header Authorization] contains "Bearer" } {
    log local0.debug "Bearer: [HTTP::header Authorization]"
    HTTP::insert X-HUB-Bearer "[HTTP::header Authorization]"
  }
}