Re: [SR-Users] SECSIPID Identity Decode

Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug.   I just changed to this and receive “Failed to apply changes”.       if (!msg_apply_changes()) {         xlogl("L_WARN", "Failed to apply changes\n");     }   -dan     *From: *&quot;miconda(a)gmail.com&quot; &lt;miconda(a)gmail.com&gt; *Reply-To: *&quot;miconda(a)gmail.com&quot; &lt;miconda(a)gmail.com&gt; *Date: *Friday, July 2, 2021 at 9:24 AM *To: *Daniel Graham &lt;dan(a)cmsinter.net&gt; *Cc: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; *Subject: *Re: [SR-Users] SECSIPID Identity Decode   What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect? Or you don't have msg_apply_changes() in the config and thus not executed? Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5   Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230   INTERNET | TELEPHONE | MANAGED IT On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla &lt;miconda(a)gmail.com&gt; <mailto:miconda@gmail.com> wrote: Can you doublecheck msg_apply_changes() is executed? What version are you using? Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log.   The identity header is being sent but still nothing in $mb   Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230   INTERNET | TELEPHONE | MANAGED IT     *From: *&quot;miconda(a)gmail.com&quot; <mailto:miconda@gmail.com> &lt;miconda(a)gmail.com&gt; <mailto:miconda@gmail.com> *Reply-To: *&quot;miconda(a)gmail.com&quot; <mailto:miconda@gmail.com> &lt;miconda(a)gmail.com&gt; <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham &lt;dan(a)cmsinter.net&gt; <mailto:dan@cmsinter.net>, "Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode   Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs. Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.   Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230   INTERNET | TELEPHONE | MANAGED IT     *From: *&quot;miconda(a)gmail.com&quot; <mailto:miconda@gmail.com> &lt;miconda(a)gmail.com&gt; <mailto:miconda@gmail.com> *Reply-To: *&quot;miconda(a)gmail.com&quot; <mailto:miconda@gmail.com> &lt;miconda(a)gmail.com&gt; <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org>, Daniel Graham &lt;dan(a)cmsinter.net&gt; <mailto:dan@cmsinter.net> *Subject: *Re: [SR-Users] SECSIPID Identity Decode   Hello, try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there? Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().   Is there a way to immediately read a header after its added?   I tried msg_apply_changes() but $hdr(Identity) is null.   -dan     *From: *sr-users &lt;sr-users-bounces(a)lists.kamailio.org&gt; <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham &lt;dan(a)cmsinter.net&gt; <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode   Confirmed it was due to the sngrep copy. Thanks for mentioning it!   -dan     *From: *sr-users &lt;sr-users-bounces(a)lists.kamailio.org&gt; <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman &lt;bkaufman(a)nexvortex.com&gt; <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode   Dump the header to your log file, and copy it from there.  I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey!  This one’s missing bytes!”   *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman(a)nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300>   *From:* sr-users &lt;sr-users-bounces(a)lists.kamailio.org&gt; <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List &lt;sr-users(a)lists.kamailio.org&gt; <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode   Haha, yep :) I wondered if that was biting me.   -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman &lt;bkaufman(a)nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break.  Any chance that’s what you’re doing, too?   *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman(a)nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300>   *From:* sr-users &lt;sr-users-bounces(a)lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List &lt;sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil &lt;david.villasmil.work(a)gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla &lt;miconda(a)gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode   Here is an example, payload taken from Identity header.   Identity was added with secsipid_add_identity   Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");   Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�&#026Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'   -dan     *From: *sr-users &lt;sr-users-bounces(a)lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham &lt;dan(a)cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil &lt;david.villasmil.work(a)gmail.com <mailto:david.villasmil.work@gmail.com>>, &quot;miconda(a)gmail.com <mailto:miconda@gmail.com>" &lt;miconda(a)gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode   That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.   I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.   Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230   INTERNET | TELEPHONE | MANAGED IT     *From: *David Villasmil &lt;david.villasmil.work(a)gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *&quot;miconda(a)gmail.com <mailto:miconda@gmail.com>" &lt;miconda(a)gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" &lt;sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham &lt;dan(a)cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode   I DO IT WITH:   # Break JWT             $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t});             $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});   Regards,   David Villasmil email: david.villasmil.work(a)gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337     On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla &lt;miconda(a)gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64… <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.   (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte   Header decodes fine this way but not payload.   Is this an issue with the payload encoding?   Kamailio 5.5   Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230   INTERNET | TELEPHONE | MANAGED IT   __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions   * sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions   * sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions  * sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions   * sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>