[JENKINS-11849] HTTP Basic Authentication for monitoring external jobs does not allow escaped characters in user or password - Jenkins Jira

XML

Word

Printable

It looks like basic authentication does not allow escaped passwords. It encodes the escape characters. For example:

Right now, the Base64Encoder will encode "user : p%40ssword" instead of "user : p@ssword". This causes a 403 Unauthorized.

It looks like it just needs a call to java.net.URLDecoder.decode before Base64Encoder.encode in core/src/main/java/hudson/Main.java.

bryce covert created issue - 2011-11-23 19:44

bryce covert made changes - 2011-11-23 19:45

Field	Original Value	New Value
Description	It looks like basic authentication does not allow escaped passwords. It encodes the escape characters. For example: HUDSON_HOME=http://user:p%40ssword@testjenkins.com/ Right now, the Base64Encoder will encode "user:p%40ssword" instead of "user:p@ssword". This causes a 403 Unauthorized. It looks like it just needs a call to java.net.URLDecoder.decode before Base64Encoder.encode in core/src/main/java/hudson/Main.java.	It looks like basic authentication does not allow escaped passwords. It encodes the escape characters. For example: HUDSON_HOME=http://user:p%40ssword@testjenkins.com/ Right now, the Base64Encoder will encode "user : p%40ssword" instead of "user : p@ssword". This causes a 403 Unauthorized. It looks like it just needs a call to java.net.URLDecoder.decode before Base64Encoder.encode in core/src/main/java/hudson/Main.java.

R. Tyler Croy made changes - 2016-07-25 23:49

Workflow

JNJira [ 142092 ]

JNJira + In-Review [ 175614 ]