On 28 May 2018 at 12:32, Jonathan Matthews <[email protected]> wrote:
> I think with your points and ccripy's sneaky (kudos!) padding
> insertion, I can do something which suffices for my current audit
> needs.
For the list, here's my working v1 that I ended up with. I'm sure
various things can be improved! :-)
I couldn't get ccripy's concat() and length() converters to work, but
I've stolen the basic idea - many thanks!
acl ACL_jwt_payload_4x_chars_long var(txn.jwtpayload) -m reg ^(.{4})+$
http-request set-var(txn.jwtpayload) req.hdr(jwt)
http-request set-var(txn.jwtpayload) var(txn.jwtpayload),regsub($,=)
if !ACL_jwt_payload_4x_chars_long
http-request set-var(txn.jwtpayload) var(txn.jwtpayload),regsub($,=)
if !ACL_jwt_payload_4x_chars_long
http-request set-var(txn.jwtpayload) var(txn.jwtpayload),regsub(-,+,g)
http-request set-var(txn.jwtpayload) var(txn.jwtpayload),regsub(_,/,g)
log-format "<stuff> jwt-payload:%[var(txn.jwtpayload),b64dec]"
Improvements and suggestions welcome; flames and horror -> /dev/null ;-)
Jonathan
