[ 
https://issues.apache.org/jira/browse/PROTON-553?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

James Birdsall updated PROTON-553:
----------------------------------

    Attachment: sasl.c

I have hacked a quick fix into pn_sasl_plain() which unblocks my testing with 
ServiceBus, at least.

> Proton-C does not URLdecode password before doing SASL-PLAIN
> ------------------------------------------------------------
>
>                 Key: PROTON-553
>                 URL: https://issues.apache.org/jira/browse/PROTON-553
>             Project: Qpid Proton
>          Issue Type: Bug
>          Components: proton-c
>    Affects Versions: 0.7
>            Reporter: James Birdsall
>         Attachments: sasl.c
>
>
> This is a serious issue using Proton-C against ServiceBus because our 
> passwords are base64-encoded keys and frequently contain '/'. Previous 
> versions of Proton-C didn't care about technically illegal forward slashes in 
> the URL, but 0.7 sure does. URL encoding the password gets around that, but 
> then the encoded password is presented to our broker and is rejected. Since 
> Proton is the one dealing with a URL and enforcing URL rules, it should do 
> the decoding before passing the pieces on to other layers.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to