Rewrite JSON value.

Question

Dear Experts,&nbsp;I need to ask if is it possible to inject a value "deviceName": "ESSApp" in the JSON content below if i got the following value in the "formName": "P59MBLVR_W59MBLVRE" value, in mean rerwite the http request when it is forwarded to the real application server (node).&nbsp;POST /xxx/formservice HTTP/1.1Content-Type: application/json; charset=utf-8Content-Length: 1127Expect: 100-continueHost: xxx:7003&nbsp;{"token":"044kNJzsQNJJnQ86kw3bkBeWcNRoA8MdJ6wczvYhBbQ77Q=MDE5MDA2MjU3MjM2MDc5NDk0ODQ0MTEwNkVTU0FwcDE1OTgyNTA3ODAwNDU=","formActions": [&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "ESS",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "15"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "19"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "90013234",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "29"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "24/08/2020",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "21"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "120000",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "25"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "30",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "35"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "01",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "33"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{"command": "DoAction",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "11"}	&nbsp;&nbsp;],		&nbsp;&nbsp;"formName": "P59MBLVR_W59MBLVRE",	&nbsp;&nbsp;"returnControlIDs":"39|31|37"&nbsp;&nbsp;}

simon_blakely · Answer

You can do this in an irule with the STREAM profile, or collect the payload parse it and rewrite it.

The question is how much parsing of the content is required to make the insertion safe.

Please provide an example of the incoming and outgoing content.

muhannad · Answer

Hi Simon,&nbsp;Thanks for your kind help.&nbsp;I have collected some captures to show you how is the flow:&nbsp;The client request a token:POST /xxx/v2/tokenrequest/ HTTP/1.1Authorization: Basic Q1NTUE9SVEFMOnBydHVzcl81MzE=Content-Type: application/jsonContent-Length: 23Host: xxx:7003&nbsp;{"deviceName":"ESSApp"}HTTP/1.1 200 OK&nbsp;Date: Tue, 25 Aug 2020 07:46:27 GMTContent-Length: 680Content-Type: application/json; charset=UTF-8Access-Control-Allow-Methods: GET, POST, OPTIONSSet-Cookie: JSESSIONID=12UklSL6A3BL2RYaOwxuAb0E35FhInJQPDhX13PQgrej7jYI2T40!-976037407; path=/jderest; HttpOnlyAccess-Control-Allow-Origin: *&nbsp;{"username":"CSSPORTAL","environment":"JPD920","role":"*ALL","jasserver":"http://HQOWL2:8005","userInfo":{"token":"0445GZVPRIhb9rtxHtxl9HfKVaikQpPgw2BdIQ5BEGz8tQ=MDE5MDA2MTk4OTM5NzkwMjk4NzA4MjkwNEVTU0FwcDE1OTgzNDE1ODc3MDU=","langPref":"&nbsp;","locale":"en","dateFormat":"DME","dateSeperator":"/","simpleDateFormat":"dd/MM/yyyy","decimalFormat":".","addressNumber":0,"alphaName":"CSSPORTAL","appsRelease":"E920","country":" ","username":"CSSPORTAL"},"userAuthorized":false,"version":null,"poStringJSON":null,"altPoStringJSON":null,"aisSessionCookie":"12UklSL6A3BL2RYaOwxuAb0E35FhInJQPDhX13PQgrej7jYI2T40!-976037407!1598341587706","adminAuthorized":false,"passwordAboutToExpire":false}&nbsp;The client is requesting the formservices: POST /xxx/formservice HTTP/1.1Content-Type: application/json; charset=utf-8Content-Length: 1133Host: xxxx:7003&nbsp;{"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=","formActions": [&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "ESS",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "15"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "Ggtest",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "19"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "90013234",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "29"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "29/08/2020",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "21"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "120000",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "25"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "55",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "35"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"command": "SetControlValue",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"value": "03",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "33"&nbsp;&nbsp;&nbsp;&nbsp;},&nbsp;&nbsp;&nbsp;&nbsp;{"command": "DoAction",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"controlID": "11"}	&nbsp;&nbsp;],		&nbsp;&nbsp;"formName": "P59MBLVR_W59MBLVRE",	&nbsp;&nbsp;"returnControlIDs":"39|31|37"&nbsp;&nbsp;}&nbsp;The Response from the server is 444 cause i am missing the "deviceName":"ESSApp" in the body:HTTP/1.1 444&nbsp;Date: Tue, 25 Aug 2020 07:46:27 GMTContent-Length: 162Content-Type: application/json; charset=UTF-8Access-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Allow-Origin: *&nbsp;{&nbsp;"message" : "Invalid Token: Please Request a New Token",&nbsp;"exception" : "java.lang.Exception",&nbsp;"timeStamp" : "2020-08-25:10.46.27","deprecated":true }&nbsp;What i need is to make the F5 inserting the {"deviceName":"ESSApp"} before the &nbsp;&nbsp;"formName": "P59MBLVR_W59MBLVRE",	&nbsp;&nbsp;"returnControlIDs":"39|31|37" in the JSON body.&nbsp;Many thanks in advance for your help.&nbsp;Regards,Muhannad

muhannad · Answer

This should be done from f5 side to the server.

muhannad · Answer

Any update Simon?

simon_blakely · Answer

when HTTP_REQUEST {
  log local0. "starting collect"
      HTTP::collect [HTTP::header Content-Length]
      set clen [HTTP::header Content-Length]
}
when HTTP_REQUEST_DATA {
  binary scan [HTTP::payload] c* throwaway
  set incoming [HTTP::payload]
  log local0. "before: $incoming"
  regsub -all {,   "formName} $incoming {,  {"deviceName":"ESSApp"},  } newdata
  log local0. "new data is $newdata"
  HTTP::payload replace 0 $clen $newdata
  log local0. "after: [HTTP::payload]" 
}$ curl -kv https://172.16.0.220/xxx/formservice -d '{"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",   "formName": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }' -H 'Content-Type: application/json; charset=utf-8'
&nbsp;
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST&gt;: starting collect
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST_DATA&gt;: before: {"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",   "formName": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST_DATA&gt;: new data is {"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",  {"deviceName":"ESSApp"},  ": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }
Aug 30 16:07:03 bigip1 info tmm[12235]: Rule /Common/json_modify &lt;HTTP_REQUEST_DATA&gt;: after: {"token":"044VZAliLSXEo2l4Xcv9DFPNLQKbX7p8E3i/Zt+ksskQ+E=MDE5MDA2MjgwOTQzNzQwNjUwMjI4NzM5OUVTU0FwcDE1OTgzNDA4NzQ3NDM=",",  {"deviceName":"ESSApp"},  ": "P59MBLVR_W59MBLVRE",   "returnControlIDs":"39|31|37"  }

Forum Discussion

Rewrite JSON value.

7 Replies

Recent Discussions

Disacard SSL::cert mode to ignore when default SSLClient profile is set to request or require

About custome Response Blocking Page

About IPI check ip list

Cookie Violation - Expired TimeStamp.

CGNAT with DS-lite and LSN

Related Content

Simple iRulesLX JSON rewrite

Extract value from json

F5 Network Map to Json with Python

Rewrite Profile JSON error

Parsing F5 BIG-IP LTM DNS profile statistics and extracting values with Python