Skip to content

OCM/OCM-MLS: Standardize on base64url#383

Open
mickenordin wants to merge 2 commits into
developfrom
kano-base64
Open

OCM/OCM-MLS: Standardize on base64url#383
mickenordin wants to merge 2 commits into
developfrom
kano-base64

Conversation

@mickenordin

Copy link
Copy Markdown
Member

We use base64 in several places, in particular the invitation strings needs to be URL safe. This commit standardizes on base64url encoding in all places where we use base64, including in diagrams and in the IETF-OCM-MLS draft.

The example invite string:

YTU1YTk2NmUtMTVjMS00Y2I5LWEzOWQtNGU0YzU0Mzk5YmFmQGNsb3VkLmV4YW1wbGUub3Jn

can be decoded using standard GNU coreutils like this:

echo -n 'YTU1YTk2NmUtMTVjMS00Y2I5LWEzOWQtNGU0YzU0Mzk5YmFmQGNsb3VkLmV4YW1wbGUub3Jn' | basenc -d --base64url

and yields: a55a966e-15c1-4cb9-a39d-4e4c54399baf@cloud.example.org

We use base64 in several places, in particular the invitation strings
needs to be URL safe. This commit standardizes on base64url encoding
in all places where we use base64, including in diagrams and in the
IETF-OCM-MLS draft.

The example invite string:

YTU1YTk2NmUtMTVjMS00Y2I5LWEzOWQtNGU0YzU0Mzk5YmFmQGNsb3VkLmV4YW1wbGUub3Jn

can be decoded using standard GNU coreutils like this:

echo -n 'YTU1YTk2NmUtMTVjMS00Y2I5LWEzOWQtNGU0YzU0Mzk5YmFmQGNsb3VkLmV4YW1wbGUub3Jn' | basenc -d --base64url

and yields: a55a966e-15c1-4cb9-a39d-4e4c54399baf@cloud.example.org

@glpatcern glpatcern left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perfect, this is very unambiguous

@thibmeu thibmeu left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

much clearer. i don't know about the state of implementations. it might be worth checking if this is breaking and update them accordingly

@MahdiBaghbani MahdiBaghbani left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like it!

@MahdiBaghbani

MahdiBaghbani commented Jul 10, 2026

Copy link
Copy Markdown
Member

I have to remind us that this can become a bit misused as we have seen in the Reva based platforms other than the CERNBox in the past year's EOSC efforts.

while its fine for the invite to be base64, its definitely not fine for the actual OCM identifier of opaque_id@fqdn to be in base64 format. and even worse in <base64>@fqdn format.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants