Post Request with json body

[guyyannick]

Hi,

i trying to turn on a group on hue lights using the Hue API. But somehow I have a syntax error:

` // turn the garden ligthning off
postUrl := "https://.../clip/v2/resource/grouped_light/c9149e87-87ce-47b2-8b0a-c58d7fb63744"

	// JSON body
	var jsonBody := []byte(`{"on": {"on": false}}`) -->  23:24 syntax error
	req, err := http.NewRequest(http.MethodPost, postUrl, bytes.NewBuffer(jsonBody))
	if err != nil {
		fmt.Printf("client: could not create request: %s\n", err)
	}`

Thanks

[brutella]

Es sollte genügen, wenn jsonBody ein string ist.

var jsonBody = `{"on": {"on": false}}`

[guyyannick]

Thanks,
Now I have the following exception:
error making post request: Post "https://.../clip/v2/resource/scene/56224016-509d954eaf": tls: failed to verify certificate: x509: cannot validate certificate for ... because it doesn't contain any IP SANs

What is the best way to avoid the SSL verification ?

[brutella]

You will have to disable certificate verification using the http.Transport type.

var tls = import("crypto/tls")

// Create config to disable certificate verification.
var config = new(tls.Config)
config.InsecureSkipVerify = true

// Create a new transport and assign it to the default client.
var transport = new(http.Transport)
transport.TLSClientConfig = config

var client = http.DefaultClient
client.Transport = transport

Then use the client to issue an HTTP request.

Important: The http.Transport type is not available in the current release of hkknx. There is now a new release 3.1.2-b1 where this type was added to the script environment. So please update to hkknx to this version and then try to run the above code.

Hope this helps.

[guyyannick]

Thanks, I'm now able to bypass the certificate verification. But I have the next Issue:

runtime error: invalid memory address or nil pointer dereference

Here The Script:

var hkknx = import("hkknx")
var http = import("net/http")
var fmt = import("fmt")
var bytes = import("bytes")
var tls = import("crypto/tls")
var json = import("encoding/json")

// Create config to disable certificate verification.
var config = new(tls.Config)
config.InsecureSkipVerify = true

// Create a new transport and assign it to the default client.
var transport = new(http.Transport)
transport.TLSClientConfig = config

var client = http.DefaultClient
client.Transport = transport

// Use a channel which delivers *true* if Tor door is turned on.
ch = hkknx.GroupWriteBoolNotify("6/1/61")


for {
    on = <-ch
        if on {
            println("Start the Hue scene for garden lighting")
            postUrl := "https://-.../clip/v2/resource/scene/44152144"

            // JSON body
            var jsonBody = `{"recall": {"action": "dynamic_palette"}}`
            req, err = http.NewRequest(http.MethodPost, postUrl, bytes.NewBuffer(jsonBody))
            if err != nil {
                fmt.Printf("client: could not create request: %s\n", err)
            }
	
            // Set header infos
            req.Header.Set("Content-Type", "application/json")
            req.Header.Set("hue-application-key", "....")

            res, err = client.Do(req)
            if err != nil {
                fmt.Printf("client: error making post request: %s\n", err)
            }
        } else {
            // turn the garden ligthning off
            postUrl := "https://-.../clip/v2/resource/grouped_light/9655255"

            // JSON body
            var jsonBody = `{"on": {"on": false}}`
            req, err := http.NewRequest(http.MethodPut, postUrl, bytes.NewBuffer(jsonBody))
            if err != nil {
                fmt.Printf("client: could not create request: %s\n", err)
            }

            // Set header infos
            req.Header.Set("Content-Type", "application/json")
            req.Header.Set("hue-application-key", "....")

            res, err = client.Do(req)
            if err != nil {
                  fmt.Printf("client: error making put request: %s\n", err)
            }
	}
}

[brutella]

Can you try to find out on which line this reference issue happens – println statements always help when debugging those kinds of issues.

[guyyannick]

Yes I already did it ... I ot the Error when doing the request:

res, err = client.Do(req)

[guyyannick]

@brutella Any idea regarding this issue ?

[guyyannick]

Something is broken in the Release 3.1.2-b1, my others Script using the net/http package are not working anymore:

runtime error: invalid memory address or nil pointer dereference

[brutella]

Just found the issue. Instead of creating a new transport using new(http.Transport), one should use the default transport (http.DefaultTransport).

var transport = http.DefaultTransport
transport.TLSClientConfig = config

Also you may want to create a new http client for this script and do not alter the http.DefaultClient.

var client = new(http.Client)
client.Transport = transport

---

I think it should also work to just update the TLSClientConfig field of the default transport and then use the default http client to issue the query. (The internal implementation of the default http client uses the default transport. But I haven't tested this yet.)

var config = new(tls.Config)
config.InsecureSkipVerify = true
http.DefaultTransport.TLSClientConfig = config

http.DefaultClient.Do(...)

[guyyannick]

ok, now we have the next exception 🥺
client: error making put request: Put "https://192.168.10.76/clip/v2/resource/grouped_light/b0a-c58d7fb63744": tls: malformed ECHConfigList

[guyyannick]

@brutella Any update regarding this Issue ?

[brutella]

Are you using the same code as posted above?

The error indicates that Encrypted Client Hello (ECH) is used, which shouldn't be the case if the tls.Config. EncryptedClientHelloConfigList is empty.

Or maybe the Hue API requires ECH? (I couldn't find that via a simple google search.)

[guyyannick]

Yes I'm Using the same Code ... Did you tried any HTTPS Post Request on any Server and is working for you ?
May be we can use HTTPS:

https://developers.meethue.com/develop/application-design-guidance/using-https/#Hue%20EDK

[guyyannick]

@brutella
I'm made some research regarding this issue and I can confirm that Post Request are currently not possible on any Host. The Hue API is not the issue hier ... I used https://posttestserver.dev to create a simple Post Box and got the same exception:

client: error making post request: Post "https://posttestserver.dev/p/wl1fyaj70a0643c4/post": tls: malformed ECHConfigList