search

agersant / polaris-web

Web client for Polaris
https://github.com/agersant/polaris
MIT License
18 stars 12 forks source link

Password auth broken with certain special characters #59

Closed vosscodes closed 4 years ago

vosscodes commented 4 years ago

Polaris 0.12.3, from the linked docker-polaris repo Tested on MacOS/Windows/Android with latest Firefox/Chrome

When logging into polaris-web, some special characters are getting urlencoded in passwords and breaking auth for any account using them. bl$ah -> "password": "bl%24h" bl%ah -> "password": "bl%25h" bl!ah -> "password": "bl!ah"

Hitting the api directly works as expected, so those characters are properly making it into the db during initial setup.

agersant commented 4 years ago

Thank you for the report!

I just fixed this in b558c69f945a1c82128f79d73637bf2f42913442 - will be in the next release (no ETA).