Rewrite JSON value.

Question

Dear Experts,&nbsp;I need to ask if is it possible to inject a value "deviceName": "ESSApp" in the JSON content below if i got the following value in the "formName": "P59MBLVR_W59MBLVRE" value, in mean rerwite the http request when it is forwarded to the real application server (node).&nbsp;POST /xxx/formservice HTTP/1.1Content-Type: application/json; charset=utf-8Content-Length: 1127Expect: 100-continueHost: xxx:7003&nbsp;{"token":"044kNJzsQNJJnQ86kw3bkBeWcNRoA8MdJ6wczvYhBbQ77Q=MDE5MDA2MjU3MjM2MDc5NDk0ODQ0MTEwNkVTU0FwcDE1OTgyNTA3ODAwNDU=","formActions": [&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "ESS",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "15"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "19"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "90013234",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "29"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "24/08/2020",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "21"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "120000",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "25"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "30",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "35"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "01",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "33"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{"command": "DoAction",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "11"}	&nbsp;&nbsp;],		&nbsp;&nbsp;"formName": "P59MBLVR_W59MBLVRE",	&nbsp;&nbsp;"returnControlIDs":"39|31|37"&nbsp;&nbsp;}

simon_blakely · Answer

You can do this in an irule with the STREAM profile, or collect the payload parse it and rewrite it.

The question is how much parsing of the content is required to make the insertion safe.

Please provide an example of the incoming and outgoing content.

muhannad · Answer

Hi Simon,&nbsp;Thanks for your kind help.&nbsp;I have collected some captures to show you how is the flow:&nbsp;The client request a token:POST /xxx/v2/tokenrequest/ HTTP/1.1Authorization: Basic Q1NTUE9SVEFMOnBydHVzcl81MzE=Content-Type: application/jsonContent-Length: 23Host: xxx:7003&nbsp;{"deviceName":"ESSApp"}HTTP/1.1 200 OK&nbsp;Date: Tue, 25 Aug 2020 07:46:27 GMTContent-Length: 680Content-Type: application/json; charset=UTF-8Access-Control-Allow-Methods: GET, POST, OPTIONSSet-Cookie: JSESSIONID=12UklSL6A3BL2RYaOwxuAb0E35FhInJQPDhX13PQgrej7jYI2T40!-976037407; path=/jderest; HttpOnlyAccess-Control-Allow-Origin: *&nbsp;{"username":"CSSPORTAL","environment":"JPD920","role":"*ALL","jasserver":"http://HQOWL2:8005","userInfo":{"token":"0445GZVPRIhb9rtxHtxl9HfKVaikQpPgw2BdIQ5BEGz8tQ=MDE5MDA2MTk4OTM5NzkwMjk4NzA4MjkwNEVTU0FwcDE1OTgzNDE1ODc3MDU=","langPref":"&nbsp;","locale":"en","dateFormat":"DME","dateSeperator":"/","simpleDateFormat":"dd/MM/yyyy","decimalFormat":".","addressNumber":0,"alphaName":"CSSPORTAL","appsRelease":"E920","country":" ","username":"CSSPORTAL"},"userAuthorized":false,"version":null,"poStringJSON":null,"altPoStringJSON":null,"aisSessionCookie":"12UklSL6A3BL2RYaOwxuAb0E35FhInJQPDhX13PQgrej7jYI2T40!-976037407!1598341587706","adminAuthorized":false,"passwordAboutToExpire":false}&nbsp;The client is requesting the formservices: POST /xxx/formservice HTTP/1.1Content-Type: application/json; charset=utf-8Content-Length: 1133Host: xxxx:7003&nbsp;{"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=","formActions": [&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "ESS",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "15"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "Ggtest",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "19"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "90013234",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "29"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "29/08/2020",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "21"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "120000",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "25"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "55",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "35"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "03",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "33"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{"command": "DoAction",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "11"}	&nbsp;&nbsp;],		&nbsp;&nbsp;"formName": "P59MBLVR_W59MBLVRE",	&nbsp;&nbsp;"returnControlIDs":"39|31|37"&nbsp;&nbsp;}&nbsp;The Response from the server is 444 cause i am missing the "deviceName":"ESSApp" in the body:HTTP/1.1 444&nbsp;Date: Tue, 25 Aug 2020 07:46:27 GMTContent-Length: 162Content-Type: application/json; charset=UTF-8Access-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Allow-Origin: *&nbsp;{&nbsp;"message" : "Invalid Token: Please Request a New Token",&nbsp;"exception" : "java.lang.Exception",&nbsp;"timeStamp" : "2020-08-25:10.46.27","deprecated":true }&nbsp;What i need is to make the F5 inserting the {"deviceName":"ESSApp"} before the &nbsp;&nbsp;"formName": "P59MBLVR_W59MBLVRE",	&nbsp;&nbsp;"returnControlIDs":"39|31|37" in the JSON body.&nbsp;Many thanks in advance for your help.&nbsp;Regards,Muhannad

muhannad · Answer

This should be done from f5 side to the server.

muhannad · Answer

Any update Simon?

simon_blakely · Answer

when HTTP_REQUEST {
  log local0. "starting collect"
      HTTP::collect [HTTP::header Content-Length]
      set clen [HTTP::header Content-Length]
}
when HTTP_REQUEST_DATA {
  binary scan [HTTP::payload] c* throwaway
  set incoming [HTTP::payload]
  log local0. "before: $incoming"
  regsub -all {,   "formName} $incoming {,  {"deviceName":"ESSApp"},  } newdata
  log local0. "new data is $newdata"
  HTTP::payload replace 0 $clen $newdata
  log local0. "after: [HTTP::payload]" 
}$ curl -kv https://172.16.0.220/xxx/formservice -d '{"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",   "formName": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }' -H 'Content-Type: application/json; charset=utf-8'
&nbsp;
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST&gt;: starting collect
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST_DATA&gt;: before: {"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",   "formName": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST_DATA&gt;: new data is {"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",  {"deviceName":"ESSApp"},  ": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST_DATA&gt;: after: {"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",  {"deviceName":"ESSApp"},  ": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }

Forum Discussion

Rewrite JSON value.

Recent Discussions

Application only need to access from 2 uris

In Radius auth, how to allow second attempt of token input when the first input is incorrect?

AS3 Limitations

Unable to install firmware OS and drop at 10%

Statistics ›› Analytics : HTTP : Overview

Related Content

Simple iRulesLX JSON rewrite

Json parsing with iRules

Extract value from json

F5 Network Map to Json with Python

Rewrite Profile JSON error

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS