You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2005/01/05 22:58:52 UTC

DO NOT REPLY [Bug 31198] - Non-ASCII Passwords Converted to UTF-8

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=31198>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31198


markt@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         OS/Version|                            |All
            Version|4.0.6 Final                 |4.1.31




------- Additional Comments From markt@apache.org  2005-01-05 22:58 -------
Quick update:

The fix (using the filter) described in 29091 appears to resolve the issues with
the admin app (passwords are saved correctly in UTF-8) but a much trickier
problem has emerged in testing.

For BASIC auth the password is converted to bytes and base 64 encoded. The
problem appears to be the different browsers (at least IE and FireFox) make
different encoding assumptions (and neither seem to assume UTF-8) at this point
because the same username and password results in different Authorization
headers. It is looking like another i18n grey area but I will do some more work
to see if there is anything that can be done to work around this fun and games.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org