Hi,
I am trying to check XML content (HTTP posted) with an hmac function in a RESTXQ webapp.
My Java client sends an HTTP post request where XML data looks like :
<data><user>doe</user><content><TEI xsi:schemaLocation="http://www.tei-c.org/ns/1.0" xml:id="idtest"
<teiHeader <fileDesc <titleStmt
<title Test</title <author
xml:id="authortest"
XXX</author </titleStmt </teiHeader <text <front </front
<body
xml:space="preserve"
<listPlace <place
type="lieu"
<placeName
xml:lang="la"
Burgunvilla</placeName </place </listPlace
</body </text </TEI </content></data>
This content is HMAC encrypted and the signature is added to the HTTP header :
[...] String secret = "1234"; StringEntity entity = new StringEntity(xml, ContentType.create("text/xml", Consts.UTF_8)); String signature = HTTPUtils.hmacSHA1(xml, secret); httppost.setHeader("Authorization", signature); httppost.setEntity(entity); [...]
Here is my RESTXQ function :
declare %rest:POST("{$body}") %rest:consumes("application/xml", "text/xml") %rest:header-param("Authorization", "{$signature}", "none") %rest:path("/sf/testpost") function sf.test:testPost($signature,$body){ let $secret := 1234 crypto:hmac($body,$secret,'sha1','base64') = $signature }
Equality check always fails with such an XML sequence but works fine when XML does not contain any carriage return : <data><user>doe</user><content><TEI><front></front><text><body>This is a test</body></text></TEI>
It seems to come when "The body of a POST or PUT request is converted to an XQuery item".
I tried to set serializer's options without any success !
How could I retrieve xml (in $body) exactly serialized as sent by the client ?
Tests are running on BaseX922. Thank you for your time.
Jérôme