← Back to team overview

openerp-india team mailing list archive

[Bug 1093277] [NEW] OpenERPAuthProvider does not allow passwords with ":" for basic auth

 

Public bug reported:

The OpenERPAuthProvider class does not accept a password if it contains a ":". The problem is that username and password in HTTP basic auth are sent as one string, separated by ":".
If there is now more than one ":" in the string, splitting it fails. This can be fixed by changing the call split(":") to split(":", 1) in checkRequest().

** Affects: openobject-server
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Server.
https://bugs.launchpad.net/bugs/1093277

Title:
  OpenERPAuthProvider does not allow passwords with ":" for basic auth

Status in OpenERP Server:
  New

Bug description:
  The OpenERPAuthProvider class does not accept a password if it contains a ":". The problem is that username and password in HTTP basic auth are sent as one string, separated by ":".
  If there is now more than one ":" in the string, splitting it fails. This can be fixed by changing the call split(":") to split(":", 1) in checkRequest().

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-server/+bug/1093277/+subscriptions


Follow ups

References