• 0

[C#] Am I missing a pitfall with base64 encode sending?


Question

I am always learning different parts of the C# language b/c lets face it, it's a lot of fun :). I've decided to configure my wcf service as a rest service which supports json request/response instead of xml. All has gone well and I can serialize/deserialize my messages into complex classes so far, unless I send a bunch of data in them. I've tried to change my readerQuotas, etc, etc but everytime I try to make a call it says "Error: Bad Data". I know the service works because I can call simple functions and pass data to/from the service. But if I pass a class with 3 byte[] properties each 128 bytes in length it fails. If I pass the same class with each byte[] param with 3 bytes of data it goes through (I base64 encode each complex class after serializing them). Here is my example code:

This example passes and goes through:

GetTestSalesRequest req = new GetTestSalesRequest()
			{
				CurrentTest = new byte[] { 1 },
				CurrentMTest = new byte[] { 4 },
				UserName = this.gl_userName,// <---- is a string
				UserPwd = new byte[] { 2 }
			};

string test = await this.gl_client2.TestFunc(req);
			System.Diagnostics.Debug.WriteLine("Test function: {0}", test);

This example fails.


GetTestSalesRequest req = new GetTestSalesRequest()
			{
				CurrentTest = CryptographicEngine.Encrypt(keySvr, Encoding.UTF8.GetBytes(test1.ToString()).AsBuffer(), null).ToArray(), // <---- is a byte[]
				CurrentMTest = CryptographicEngine.Encrypt(keySvr, Encoding.UTF8.GetBytes(test2.ToString()).AsBuffer(), null).ToArray(), //<---- is a  byte[]
				UserName = this.gl_userName,// <---- is a string
				UserPwd = this.gl_userPwd // <--- is a byte[]
			};

string test = await this.gl_client2.TestFunc(req);
			System.Diagnostics.Debug.WriteLine("Test function: {0}", test);


public async Task<string> TestFunc(GetTestSalesRequest request)
		{

string resBody = null;
			byte[] testStr = Encoding.UTF8.GetBytes(WebHelperClass.SerializeJSONObj<GetTestSalesRequest>(request));
			string addr = string.Format("{0}/TestFunc/{1}", this.gl_baseAddr, Convert.ToBase64String(testStr));
			WebRequest req = WebRequest.Create(addr);
			HttpWebResponse res = await req.GetResponseAsync() as HttpWebResponse;
			if (res.StatusCode == HttpStatusCode.OK)
			{
				using (Stream stream = res.GetResponseStream())
				{
					using (StreamReader sr = new StreamReader(stream))
					{
						resBody = sr.ReadToEnd();
						sr.Dispose();
					}
				}
			}
			return resBody;
}

Is there a pitfall I'm going into here? What am I missing that is really obvious because this has to be possible to be done.

10 answers to this question

Recommended Posts

  • 0

Not really strong with debugging other peoples code.. But.. have you tried:

1) Sending the same data but un-encrypted

2) Using AsciiEncoding.Ascii instead of Encoding.UTF8 for the base64 encode?

3) It looks like you are just using the CryptographicEngine, that won't base64 it, have you tried just a plain-jane base64 encode?

4) You pass in a few variables, are you sure they are all initialized correctly?

  • 0

Well basically I'm just taking the json string (that was created by serializing the complex class) in TestFunc and base64 encoding it to send it across to the rest service so I don't have a long query string similar to /TestFunc/{[80,10,01,01,30,10,10], "test":"etc"}. So I am base64 encoding the whole thing then decoding it on the rest service side. If I send the class with only have small amounts of byte data it goes through just fine. If I send each byte[] with having 128 different indexes each then it fails. Ingramator which files do you want? The debugger just outputs saying "The remote server returned an error: (400) Bad Request."

System.Net.WebException was unhandled by user code

HResult=-2146233079

Message=The remote server returned an error: (400) Bad Request.

Source=System

StackTrace:

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Threading.Tasks.TaskFactory`1.FromAsyncCoreLogic(IAsyncResult iar, Func`2 endFunction, Action`1 endAction, Task`1 promise, Boolean requiresSynchronization)

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()

at TestSaleStoreApp.TestSaleRestSvcClient.<TestFunc>d__a.MoveNext() in c:\Users\User\Documents\Visual Studio 2012\Projects\TestSaleStoreApp\TestSaleStoreApp\TestSaleRestSvcClient.cs:line 50

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()

at TestSaleStoreApp.MainUserPg.<initSettings>d__16.MoveNext() in c:\Users\User\Documents\Visual Studio 2012\Projects\TestSaleStoreApp\TestSaleStoreApp\MainUserPg.xaml.cs:line 524

InnerException:

If you need more info let me know :) I'm stumped on this one. As for the ASCII I haven't tried that yet I'll look into it later today but I'm suspecting it has to do with the length of the content (which I've changed the readerQuota settings).

I also really appreciate the help so far guys!

  • 0

It's quite possible you're just sending too much data via the query string, why aren't you just sending it as the request body instead?

base64 makes the content larger, and you don't need to do it with text (like JSON).

  • 0

@The_Decryptor b/c I'm new to using Rest services I'm used to using SOAP :) I'll look into that thanks.

EDIT: My url looks like this:

localhost:8733/Design_Time_Addresses/TestSaleRestSvc/Service1/TestFunc/eyJDdXJyZW50Q29vcmRzTGF0IjpbMiwzLDRdLCJDdXJyZW50Q29vcmRzTG9uZyI6WzMsNCw1XSwiVXNlck5hbWUiOiJyeWFuIiwiVXNlclB3ZCI6WzFdfQ==&pwdKey=Aw==&latKey=JbU2hfwNBi1vHZxH5OnUcKabsT1kx16jqn3BAxLDXPTCHbyIlDyPOoK0NNQVSLmaOD5x1bjzipTM9VJOaQgTIgjmqNtX+l9Jq2EeetSQI58RhCwUFRQGOpKaLEJ03JeZ5UjD3rTzm2HFr5P0SvQBYBsgLB9W1je3PPoD28Ro7IU=&longKey=AQ=="]localhost:8733/Design_Time_Addresses/TestSaleRestSvc/Service1/TestFunc/eyJDdXJyZW50Q29vcmRzTGF0IjpbMiwzLDRdLCJDdXJyZW50Q29vcmRzTG9uZyI6WzMsNCw1XSwiVXNlck5hbWUiOiJyeWFuIiwiVXNlclB3ZCI6WzFdfQ==&pwdKey=Aw==&latKey=JbU2hfwNBi1vHZxH5OnUcKabsT1kx16jqn3BAxLDXPTCHbyIlDyPOoK0NNQVSLmaOD5x1bjzipTM9VJOaQgTIgjmqNtX+l9Jq2EeetSQI58RhCwUFRQGOpKaLEJ03JeZ5UjD3rTzm2HFr5P0SvQBYBsgLB9W1je3PPoD28Ro7IU=&longKey=AQ==

  • 0

Hmm it's always to debug without having it in front of you but I can try and point you in the right direction! :) If its working with smaller data samples it may be that you're [trying to encode an unsupported data type]/[base64 doesn't know what to encode so its sending invalid data] but I can't tell from the log there. The most common problem I find is that the data buffer is not being completely filled or filled correctly so I'd investigate that first! Enable tracing first, instructions here http://msdn.microsoft.com/en-us/library/ms733025.aspx :p then test and it will show you exactly where the problem is occurring. Hope this helps, good luck with the project mate!

  • 0

So I want to take this time to thank everyone who helped me. You guys are all great assets to this community and I hope I can give back one day by finding other questions I can answer in this forum and post my 2 cents on the subject (you guys are just too quick it seems most of the time and say what I would say :) ). +1 to you all and I hope you have a good holiday.

This topic is now closed to further replies.
  • Posts

    • Meta will now use data from outside businesses to personalize AI responses by David Uzondu In an update that's rolling out globally (except in a handful of countries), Meta will use your data from outside businesses to personalize your AI responses and your primary feeds. Meta already utilizes your shopping activity to target ads, but the company now plans to expand this tracking to personalize other "parts of your experience" like feed algorithms and AI assistant chats. The company is replacing the two settings ("Your activity off Meta technologies" and "Activity from other businesses") that currently let you disconnect off-platform activity with a single, renamed setting called Activity from other businesses. If you don't want Meta to manipulate your feed and AI responses using your outside history, you can just turn the Activity from other businesses setting off in your account settings. This toggle resides within your Accounts Center, applying your choice to every connected profile. Turning this off will not stop companies from sending your data to Meta. The company will still collect your web interactions, but it only uses them to train products, while still accessing external accounts you connect. When The Verge spoke to Meta spokesperson, Emil Vazquez, the representative said that this update will exclude several locations at launch including the European region, the UK, Brazil, Thailand, South Africa, Turkey, South Korea, Ecuador, Nigeria, and Kenya. The new update comes at a time when the social media giant is recovering from a major PR disaster involving generative AI. Last week, there was a huge security issue on Instagram where attackers figured out a way to exploit a prompt injection vulnerability. Hackers managed to trick Meta AI into handing over account ownership (even if the victim had 2FA enabled). Some of the affected accounts include the dormant Obama White House profile, cosmetics brand Sephora, the Chief Master Sergeant of the Space Force, and security researcher Jane Manchun Wong. Internally, the company also had to scale back plans on its Model Capability Initiative (MCI), an employee-monitoring program designed to train corporate AI models by recording worker keystrokes and screen activity, after employees raised privacy concerns and complained about severe battery life drain.
    • JetBrains is working to cut false positives in RustRover 2026.2 by David Uzondu Recently, JetBrains released the fifth EAP build of its dedicated IDE, RustRover 2026.2, bringing improvements like a Run gutter icon for criterion_main! macro benchmarking and a feature that alerts you when there are unused traits in your current scope. Now, the company is out with a blog post addressing one of the "most common" complaints from users: false positives. In RustRover, a false positive occurs when the editor incorrectly highlights something as an error even though the project compiles and runs successfully. This mismatch flags a gap between the IDE's internal intelligence and the actual compiler. When the editor flashes red warnings over perfectly valid code, developers lose trust in the tool, which stalls momentum. Traditionally, RustRover runs cargo check to detect compiler errors and warnings, but it also relies on its own code analysis engine to power real-time features. To provide quick feedback, this engine parses your source code into a syntax tree while inferring types and resolving names as you type. Because this engine must work on broken, half-written code and react instantly, its logic sometimes diverges from the compiler's, producing false positives that do not exist in the compiler's eyes. JetBrains said that it has a "dedicated task force" focused specifically on identifying and fixing false positives by analyzing user reports and examining large-scale open-source projects. To speed up this process, the team built an internal system modeled after Crater, the famous Rust project that compiles and runs tests for every single crate published on crates.io. This automated pipeline compares the diagnostics from RustRover's analysis with actual compiler output to catch discrepancies before they reach users, ensuring smoother workflows. RustRover, for those who're unaware, is a dedicated IDE designed specifically for Rust developers. It's been around for a couple of years now, providing features like built-in debugging via LLDB, seamless cargo integration, advanced macro expansion, and HTML support. JetBrains distributes the app under two licensing models: a paid commercial subscription and a free option for non-commercial use.
    • Last year I bought the 2TB variant for $114 on Amazon. That's crazy that the 1TB is now 67% more expensive for half the storage, even with the newer T9 already on the market. And that's considered a good deal.
    • You can disable all non needed features from Brave. There is also Brave Origin which removes them entirely and it is free for Linux.
    • I wish I could use Brave but the tab suspension feature is horrible. It doesn't suspend them like Edge does. Even after 2h open with 70+ tabs (same as Edge), it has 2GB more consumption than Edge for no reason.
  • Recent Achievements

    • One Year In
      Primer1st earned a badge
      One Year In
    • Experienced
      JayZJay went up a rank
      Experienced
    • Reacting Well
      Sir_Timbit earned a badge
      Reacting Well
    • Week One Done
      rubentuben8 earned a badge
      Week One Done
    • Week One Done
      ARaclen earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      512
    2. 2
      PsYcHoKiLLa
      229
    3. 3
      Edouard
      135
    4. 4
      ATLien_0
      87
    5. 5
      Steven P.
      81
  • Tell a friend

    Love Neowin? Tell a friend!