Decode base64 headers
Automatically decode base64 values in request headers and add the decoded value as a response header.
In the following example, you combine multiple Inja functions to accomplish the following tasks:
- Extract a base64-encoded value from a specific request header.
- Decode the base64-encoded value.
- Trim the decoded value and only capture everything starting from the 11th character.
- Add the captured string as reponse header.
Before you begin
Follow the Get started guide to install Gloo Gateway, set up a gateway resource, and deploy the httpbin sample app.
Get the external address of the gateway and save it in an environment variable.
Decode base64 headers
Encode a string to base64.
echo -n "transformation test" | base64
Example output:
dHJhbnNmb3JtYXRpb24gdGVzdA==
Create a VirtualHostOption resource with your transformation rules. In the following example, you decode the base64-encoded value from the
x-base64-encoded
request header and populate the decoded value into anx-base64-decoded
header starting from the 11th character.kubectl apply -n gloo-system -f- <<EOF apiVersion: gateway.solo.io/v1 kind: VirtualHostOption metadata: name: transformation namespace: gloo-system spec: options: transformations: responseTransformation: transformationTemplate: headers: x-base64-decoded: text: '{{substring(base64_decode(request_header("x-base64-encoded")), 11)}}' targetRefs: - group: gateway.networking.k8s.io kind: Gateway name: http namespace: gloo-system EOF
Send a request to the httpbin app and include your base64-encoded string in the
x-base64-encoded
request header. Verify that you get back a 200 HTTP response code and that you see the trimmed decoded value of your base64-encoded string in thex-base64-decoded
response header.Example output:
* Mark bundle as not supporting multiuse < HTTP/1.1 200 OK HTTP/1.1 200 OK < access-control-allow-credentials: true access-control-allow-credentials: true < access-control-allow-origin: * access-control-allow-origin: * < content-type: application/json; encoding=utf-8 content-type: application/json; encoding=utf-8 < date: Wed, 26 Jun 2024 02:54:48 GMT date: Wed, 26 Jun 2024 02:54:48 GMT < content-length: 3 content-length: 3 < x-envoy-upstream-service-time: 2 x-envoy-upstream-service-time: 2 < server: envoy server: envoy < x-envoy-decorator-operation: httpbin.httpbin.svc.cluster.local:8000/* x-envoy-decorator-operation: httpbin.httpbin.svc.cluster.local:8000/* < x-base64-decoded: ion test x-base64-decoded: ion test
Cleanup
You can remove the resources that you created in this guide.
kubectl delete virtualhostoption transformation -n gloo-system