Bug 663722 - passwords do not seem to allow special characters?
Summary: passwords do not seem to allow special characters?
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: RHQ Project
Classification: Other
Component: Core UI
Version: 4.0.0.B02
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: ---
: ---
Assignee: Charles Crouch
QA Contact: Mike Foley
URL:
Whiteboard:
Depends On:
Blocks: rhq41 rhq41-ui
TreeView+ depends on / blocked
 
Reported: 2010-12-16 16:50 UTC by John Mazzitelli
Modified: 2015-02-01 23:26 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2013-09-03 17:00:54 UTC
Embargoed:


Attachments (Terms of Use)

Description John Mazzitelli 2010-12-16 16:50:38 UTC
Create a new user and make the password: ~!@#$%^&*()_+

(just hold the shift key and move left-to-right along the top row of a US keyboard)

Try to log in as the new user with that new password. It fails to log in for me.

Now change the password to something simple (I used six 'a' characters: aaaaaa).

Try to log in again. This is OK for me and logs me in successfully.

Something might be wrong with special characters in a password???

Comment 1 John Mazzitelli 2010-12-16 16:51:57 UTC
assigning to ips since he knows all about the new gwt add-user functionality

Comment 2 Ian Springer 2011-08-18 15:15:05 UTC
[master fe95a5a] fixes this. In LoginView.login(), we needed to URL-encode the username and password in the body of the POST request sent to authenticate with portal-war.

To QA this, try changing some user's password to "%%%%%%" and then trying to login as that user.

Comment 3 John Mazzitelli 2011-08-19 13:48:56 UTC
(In reply to comment #2)
> To QA this, try changing some user's password to "%%%%%%" and then trying to
> login as that user.

QA should not just test with that one special character. Test with my replication procedure to test that we support all those special characters (or more if QA wants):

"Create a new user and make the password: ~!@#$%^&*()_+
(just hold the shift key and move left-to-right along the top row of a US
keyboard)"

Comment 4 Venkat 2011-08-19 14:05:06 UTC
Tested on the build#306(Version: 4.1.0-SNAPSHOT Build Number: c5c70b8)

Created a new user with the password: ~!@#$%^&*()_+     and tried to login with the user created. It's not allowing me to login to RHQ. It shows a message "The username or password provided does not match our records." at login screen.

Moving to ON_DEV.

Comment 5 Ian Springer 2011-08-19 14:50:08 UTC
Good call, Mazz. I was using URL.encode() to encode the username and password, but should have been using URL.encodeComponent(), which also encodes URL delimiters such as '?' and '&'. [master a2489d6] should put this to bed.

Comment 7 Heiko W. Rupp 2013-09-03 17:00:54 UTC
Bulk closing of old issues that are in VERIFIED state.


Note You need to log in before you can comment on or make changes to this bug.