Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages? Oivvio
use for what exactly? we have no code specifically to deal with JWT but it's totally possible something we have embedded does, would depend what you are trying to do with them to figure what might make sense On Tuesday, May 3, 2016, Oivvio Polite <mylists@polite.se> wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:;> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:;> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On Tue, May 3, 2016, 16:41 Michael Jerris <mike@jerris.com> wrote:
use for what exactly?
So that I can do authorization somewhere else and just give the user a token that FS can verify without having to stay in sync with some central user repository. All of this is in a WebRTC context. Oivvio
This feature would be great regarding webrtc or verto. Otherwise, user and password must be embed or sent in html. On Tue, May 3, 2016, 17:07 Oivvio Polite <mylists@polite.se> wrote:
On Tue, May 3, 2016, 16:41 Michael Jerris <mike@jerris.com> wrote:
use for what exactly?
So that I can do authorization somewhere else and just give the user a token that FS can verify without having to stay in sync with some central user repository. All of this is in a WebRTC context.
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
U/P are not sent over html (not even sure what that means).. they are sent over secure websockets. They are then validated against the user directory. You could implement this by instead of sending u/p, sending your token, then using mod_xml_curl to do a user lookup, and in your web application validating the token. This could be made to work without any changes to FreeSWITCH. To do this you would take the token that you pass in the "passwd" field from javascript (that would be the JWT token) and when you authorize the user, you would pass back the same value in the "password" param
On May 3, 2016, at 11:16 AM, Gregor Nanger <gregor@infomedia.si> wrote:
This feature would be great regarding webrtc or verto. Otherwise, user and password must be embed or sent in html.
On Tue, May 3, 2016, 17:07 Oivvio Polite <mylists@polite.se <mailto:mylists@polite.se>> wrote:
On Tue, May 3, 2016, 16:41 Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: use for what exactly?
So that I can do authorization somewhere else and just give the user a token that FS can verify without having to stay in sync with some central user repository. All of this is in a WebRTC context.
Oivvio
Hi, AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch. Best, Tristan. On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Michael, Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this. Colin On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net <mailto:gled@remote-shell.net>> wrote: Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean. Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side. The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app. Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client? Best regards, Gregor On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com> wrote:
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com <mailto:colin.morelli@gmail.com>> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net <mailto:gled@remote-shell.net>> wrote: Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl? I haven't been able to figure it out Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com> wrote:
This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com> wrote:
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Sorry, Michael, if I do not understand whole registration process, but would realy like to understand. I am working with verto and xml_curl and when registering, I need to return xml formated response with password in xml_curl. I guess that freeswitch then compare what client sent and what it gets from xml_curl. Am I right? Colin, either if you get token (you can send it as username for example) it wouldn't help you, because you can't confirm in xml_curl if user is verified or not. You can only send back user details with passwords as what is expected from xml_curl. Am I right? 2016-05-03 22:31 GMT+02:00 Colin Morelli <colin.morelli@gmail.com>:
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com> wrote:
This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com> wrote:
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
Freeswitch compares what was passed to verto from the client, with what is returned from the user directory lookup. That doesn't have to be "a password" ... it just needs to match. You could hardcode your client to send whatever you want, and to pass the token in loginParams, and if its validated, return the string that will match for the password, if its not valid, return something different. mod_verto just string compares the two strings.
On May 3, 2016, at 5:01 PM, Gregor Nanger <gregor@infomedia.si> wrote:
Sorry, Michael, if I do not understand whole registration process, but would realy like to understand.
I am working with verto and xml_curl and when registering, I need to return xml formated response with password in xml_curl. I guess that freeswitch then compare what client sent and what it gets from xml_curl. Am I right?
Colin, either if you get token (you can send it as username for example) it wouldn't help you, because you can't confirm in xml_curl if user is verified or not. You can only send back user details with passwords as what is expected from xml_curl. Am I right?
2016-05-03 22:31 GMT+02:00 Colin Morelli <colin.morelli@gmail.com <mailto:colin.morelli@gmail.com>>: Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si <mailto:gregor@infomedia.si>> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com <mailto:colin.morelli@gmail.com>> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net <mailto:gled@remote-shell.net>> wrote: Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
-- Gregor Nanger
CTO t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si <http://www.infomedia.si/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Any mod_xml_curl user directory lookup example would do.
On May 3, 2016, at 4:31 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si <mailto:gregor@infomedia.si>> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com <mailto:colin.morelli@gmail.com>> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net <mailto:gled@remote-shell.net>> wrote: Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
Got it. The part that I missed was loginParams from verto. I'm not using verto in my case (actually using PJSIP). However yes, I could include custom headers in the register request to make this work. I was just hoping for something that would work in the password. Thanks, Colin On Tue, May 3, 2016 at 5:44 PM Michael Jerris <mike@jerris.com> wrote:
Any mod_xml_curl user directory lookup example would do.
On May 3, 2016, at 4:31 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com> wrote:
This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com> wrote:
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
In the case of sip, I think you can just return blank password to auth it.
On May 3, 2016, at 5:48 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Got it. The part that I missed was loginParams from verto. I'm not using verto in my case (actually using PJSIP). However yes, I could include custom headers in the register request to make this work. I was just hoping for something that would work in the password.
Thanks, Colin
On Tue, May 3, 2016 at 5:44 PM Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: Any mod_xml_curl user directory lookup example would do.
On May 3, 2016, at 4:31 PM, Colin Morelli <colin.morelli@gmail.com <mailto:colin.morelli@gmail.com>> wrote:
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si <mailto:gregor@infomedia.si>> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote: You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com <mailto:colin.morelli@gmail.com>> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net <mailto:gled@remote-shell.net>> wrote: Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
That's fantastic. I can send username and token in login parameters with empty password. Then validate token and if validated, return user conf with empty password. On Wed, May 4, 2016, 00:31 Michael Jerris <mike@jerris.com> wrote:
In the case of sip, I think you can just return blank password to auth it.
On May 3, 2016, at 5:48 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Got it. The part that I missed was loginParams from verto. I'm not using verto in my case (actually using PJSIP). However yes, I could include custom headers in the register request to make this work. I was just hoping for something that would work in the password.
Thanks, Colin
On Tue, May 3, 2016 at 5:44 PM Michael Jerris <mike@jerris.com> wrote:
Any mod_xml_curl user directory lookup example would do.
On May 3, 2016, at 4:31 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com> wrote:
This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com> wrote:
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote:
Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT through one of the available scripting languages?
Oivvio
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
think that would work, yes. Give it a try and let us know On Friday, May 6, 2016, Gregor Nanger <gregor@infomedia.si> wrote:
That's fantastic. I can send username and token in login parameters with empty password. Then validate token and if validated, return user conf with empty password.
On Wed, May 4, 2016, 00:31 Michael Jerris <mike@jerris.com <javascript:_e(%7B%7D,'cvml','mike@jerris.com');>> wrote:
In the case of sip, I think you can just return blank password to auth it.
On May 3, 2016, at 5:48 PM, Colin Morelli <colin.morelli@gmail.com <javascript:_e(%7B%7D,'cvml','colin.morelli@gmail.com');>> wrote:
Got it. The part that I missed was loginParams from verto. I'm not using verto in my case (actually using PJSIP). However yes, I could include custom headers in the register request to make this work. I was just hoping for something that would work in the password.
Thanks, Colin
On Tue, May 3, 2016 at 5:44 PM Michael Jerris <mike@jerris.com <javascript:_e(%7B%7D,'cvml','mike@jerris.com');>> wrote:
Any mod_xml_curl user directory lookup example would do.
On May 3, 2016, at 4:31 PM, Colin Morelli <colin.morelli@gmail.com <javascript:_e(%7B%7D,'cvml','colin.morelli@gmail.com');>> wrote:
Michael can you provide an example of how you'd get the password portion (or the token) to a process via xml curl?
I haven't been able to figure it out
Thanks in advance On Tue, May 3, 2016 at 4:29 PM Michael Jerris <mike@jerris.com <javascript:_e(%7B%7D,'cvml','mike@jerris.com');>> wrote:
This is incorrect.. as I said you can handle the login via a dynamic directory lookup. There is no reason or need to do anything like dynamically changing the password.
On May 3, 2016, at 4:08 PM, Gregor Nanger <gregor@infomedia.si <javascript:_e(%7B%7D,'cvml','gregor@infomedia.si');>> wrote:
Well, somwhere you have to pass username an password in client when calling login procedure in javascript. And if it is in client side, then user can see it, either by monitoring network in browser or see source code of page. In voip phone, password is hidden in password textbox for example and it is not easy accessible as from Web client. Hope you understand what I mean.
Maybe as Michael said. If you put token as loginparam, but still there is no way in xml_curl to say, oh you are verto user with this token and token is ok, so you are logged in, although you didn't send password from client side.
The best what I think of is to automatically change password on some period and client should retrieve it when login expire. This way you can use it like token. Real authorization is anyway first on your Web app.
Please correct me if I'm wrong, but from Fs side, login procedure is same for sip client or verto client?
Best regards, Gregor
On Tue, May 3, 2016, 20:17 Michael Jerris <mike@jerris.com <javascript:_e(%7B%7D,'cvml','mike@jerris.com');>> wrote:
You may have to pass it in loginParams but i think it should be possible from looking at the code. Double check what all you get in the code.
On May 3, 2016, at 1:25 PM, Colin Morelli <colin.morelli@gmail.com <javascript:_e(%7B%7D,'cvml','colin.morelli@gmail.com');>> wrote:
Michael,
Is that actually possible? I have an application using mod_xml_curl but FS doesn't send passwords as part of the directory request (as far as I can tell). I actually wanted to do something very similar to this.
Colin
On Tue, May 3, 2016 at 1:07 PM Tristan Mahé <gled@remote-shell.net <javascript:_e(%7B%7D,'cvml','gled@remote-shell.net');>> wrote:
Hi,
AFAIK, there is no module handling JWT at the moment, but you can do pretty much anything you can think of using lua, or any other langage supported by freeswitch.
Best,
Tristan.
On 05/03/2016 07:12 AM, Oivvio Polite wrote: > Can FreeSwitch handle JSON Web Tokens natively or be made to handle JWT > through one of the available scripting languages? > > Oivvio >
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger
*CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
participants (5)
-
Colin Morelli
-
Gregor Nanger
-
Michael Jerris
-
Oivvio Polite
-
Tristan Mahé