Bug 1527317

Summary: CFME - usage of non standard special characters (e.g. accents) in password causes user is not able to login
Product: Red Hat CloudForms Management Engine Reporter: Vladimir Dulava <vdulava>
Component: UI - ServiceAssignee: Ohad Levy <ohadlevy>
Status: CLOSED DUPLICATE QA Contact: Dave Johnson <dajohnso>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 5.8.0CC: bascar, dclarizi, lavenel, obarenbo
Target Milestone: GA   
Target Release: cfme-future   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-12-19 08:19:58 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Vladimir Dulava 2017-12-19 08:18:37 UTC
Description of problem:
If the password of any CFME user contains an accent character e.g. from French or Czech (š, č, ř, ...), user is not able to login, no message is given by UI, nothing is captured in evm.log, api.log, production.log, audit.log or automation.log (even on debug level).
Same behavior we can observe, if the accent character is used in wrong password - no message about invalid password in GUI, no record in the logs. Only infinite loading spinning wheel animation, sometimes the page just refreshes.

From the web browser debug it seems that the password sending is blocked on browser level

~~~
InvalidCharacterError: String contains an invalid character
application-8300ac8b714be2ce58b31b99836d1bc030e4067369d809b2eb38e05d76d9ed34.js:390

e.login
https://t7/assets/application-8300ac8b714be2ce58b31b99836d1bc030e4067369d809b2eb38e05d76d9ed34.js:390:21074
miqAjaxAuth
https://t7/assets/application-8300ac8b714be2ce58b31b99836d1bc030e4067369d809b2eb38e05d76d9ed34.js:3:4466
onclick
~~~


Version-Release number of selected component (if applicable):
Tested on CFME 5.8.2.3

How reproducible:
100%

Steps to Reproduce:

Scenario 1.
Create CFME user with password containing language specific character and try to login with it.

Scenario 2.
Just put any language specific character in the CFME login page password field and click login (as a wrong password)

Actual results:
Infinite loading spinning wheel animation, no message in GUI, no message in logs.

Expected results:
1)
In case of correct password user able to login, in case of wrong password message in GUI and logs
OR
2)
Block the ability to set the user password containing language specific characters and in case of such a character in wrong password, there should be a message in GUI and logs like for any wrong password.

Additional info:
From the web browser debug:
~~~
InvalidCharacterError: String contains an invalid character
application-8300ac8b714be2ce58b31b99836d1bc030e4067369d809b2eb38e05d76d9ed34.js:390

e.login
https://t7/assets/application-8300ac8b714be2ce58b31b99836d1bc030e4067369d809b2eb38e05d76d9ed34.js:390:21074
miqAjaxAuth
https://t7/assets/application-8300ac8b714be2ce58b31b99836d1bc030e4067369d809b2eb38e05d76d9ed34.js:3:4466
onclick
~~~

Comment 2 Vladimir Dulava 2017-12-19 08:19:58 UTC

*** This bug has been marked as a duplicate of bug 1527316 ***