imbajin commented on issue #3284: URL: https://github.com/apache/hugegraph/issues/3284#issuecomment-6039340367
@bitflicker64 Thanks for the detailed report. Our current preference is to preserve compatibility and keep the change focused. We should distinguish the restrictions imposed by HTTP Basic from any additional product-level character policy. RFC 7617 forbids control characters in both usernames and passwords, and forbids a colon in the username. A colon in the password is valid: only the first colon separates the two fields. Ordinary spaces and commas are not prohibited by that rule. Credential validation should be consistent between creation/password updates and login. Unsupported input should be rejected before saving a change, so it cannot leave an account with an unusable password. Any broader ASCII-only restriction needs a separate compatibility decision rather than being inferred from Basic's rules. Reference: https://www.rfc-editor.org/rfc/rfc7617#section-2 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
