<p dir="ltr">That's fantastic. I can send username and token in login parameters with empty password. Then validate token and if validated, return user conf with empty password. </p>
<br><div class="gmail_quote"><div dir="ltr">On Wed, May 4, 2016, 00:31 Michael Jerris <<a href="mailto:mike@jerris.com">mike@jerris.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">In the case of sip, I think you can just return blank password to auth it.</div><div style="word-wrap:break-word"><div><br><div><blockquote type="cite"><div>On May 3, 2016, at 5:48 PM, Colin Morelli <<a href="mailto:colin.morelli@gmail.com" target="_blank">colin.morelli@gmail.com</a>> wrote:</div><br><div><div dir="ltr">Got it. The part that I missed was loginParams from verto. I'm not using verto in my case (actually using PJSIP). However yes, I could include custom headers in the register request to make this work. I was just hoping for something that would work in the password.<div><br></div><div>Thanks,</div><div>Colin</div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, May 3, 2016 at 5:44 PM Michael Jerris <<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Any mod_xml_curl user directory lookup example would do.</div><div style="word-wrap:break-word"><div><br><div><blockquote type="cite"><div>On May 3, 2016, at 4:31 PM, Colin Morelli <<a href="mailto:colin.morelli@gmail.com" target="_blank">colin.morelli@gmail.com</a>> wrote:</div><br><div>Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?<br><br>I haven't been able to figure it out<br><br>Thanks in advance <br><div class="gmail_quote"><div dir="ltr">On Tue, May 3, 2016 at 4:29 PM Michael Jerris <<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.</div><div style="word-wrap:break-word"><div><br><div><blockquote type="cite"><div>On May 3, 2016, at 4:08 PM, Gregor Nanger <<a href="mailto:gregor@infomedia.si" target="_blank">gregor@infomedia.si</a>> wrote:</div><br><div><p dir="ltr">Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean. </p><p dir="ltr">Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.</p><p dir="ltr"> The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app. </p><p dir="ltr">Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?</p><p dir="ltr">Best regards, Gregor </p>
<br><div class="gmail_quote"><div dir="ltr">On Tue, May 3, 2016, 20:17 Michael Jerris <<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">You may have to pass it in <span style="color:rgb(175,95,0);font-family:Monaco;font-size:13px;background-color:rgb(0,0,0)">loginParams</span> but i think it should be possible from looking at the code. Double check what all you get in the code.</div><div style="word-wrap:break-word"><div><br><div><blockquote type="cite"><div>On May 3, 2016, at 1:25 PM, Colin Morelli <<a href="mailto:colin.morelli@gmail.com" target="_blank">colin.morelli@gmail.com</a>> wrote:</div><br><div><div dir="ltr">Michael,<div><br></div><div>Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.</div><div><br></div><div>Colin</div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <<a href="mailto:gled@remote-shell.net" target="_blank">gled@remote-shell.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
AFAIK, there is no module handling JWT at the moment, but you can do<br>
pretty much anything you can think of using lua, or any other langage<br>
supported by freeswitch.<br>
<br>
Best,<br>
<br>
Tristan.<br>
<br>
On 05/03/2016 07:12 AM, Oivvio Polite wrote:<br>
> Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT<br>
> through one of the available scripting languages?<br>
><br>
> Oivvio<br>
></blockquote></div></div></blockquote></div></div></div></blockquote></div></div></blockquote></div></div></div></blockquote></div></div></blockquote></div></div></div></blockquote></div></div></blockquote></div><br></div></div>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a></blockquote></div><div dir="ltr">-- <br></div><div dir="ltr"><table border="0" style="color:rgb(34,34,34);font-size:12px;border:1px dashed rgb(187,187,187);font-family:sans-serif;width:537px"><tbody style="border-spacing:2px;border:0px none rgb(128,128,128)"><tr valign="top" style="border-spacing:2px;border:0px none rgb(128,128,128)"><td style="font-family:arial,sans-serif;margin:8px;color:rgb(32,32,32);border-width:0px 1px 0px 0px;border-style:none solid none none;border-color:rgb(32,32,32) rgb(0,161,230) rgb(32,32,32) rgb(32,32,32);font-weight:bold;letter-spacing:1px;text-transform:capitalize;vertical-align:top;padding:1px 8px 1px 1px;width:63px;outline:rgb(32,32,32) none 0px;border-spacing:2px"><span style="color:rgb(0,161,230);outline:rgb(0,161,230) none 0px;border-spacing:2px;border:0px none rgb(0,161,230)"><font face="georgia, serif" size="2">Gregor Nanger</font></span><div style="font-size:17px;font-family:sans-serif;width:63px;outline:rgb(32,32,32) none 0px;border-spacing:2px;border:0px none rgb(32,32,32)"> </div></td><td style="font-family:arial,sans-serif;margin:8px;border:0px none rgb(80,80,80);vertical-align:top;padding:1px 1px 1px 6px;width:354px;outline:rgb(80,80,80) none 0px;border-spacing:2px"><font face="georgia, serif" size="1"><b>CTO</b><br>t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 <br>• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia <br>• <a href="http://www.infomedia.si/" target="_blank">www.infomedia.si</a></font></td></tr></tbody></table></div>