search

colymba / silverstripe-restfulapi

SilverStripe RESTful API with a default JSON serializer.
BSD 3-Clause "New" or "Revised" License
64 stars 34 forks source link

password with special characters #104

Closed jonshutt closed 5 years ago

jonshutt commented 5 years ago

If a user has a password which includes certain characters like '/', a password like 'my&pass?=xxx' results in a url of:

api/auth/login?email=test"test.com&pwd=my&pass?=xxx

This clearly won't work, as it'll just read the password as 'my'

Does anyone have a solution for this other than asking people to choose a simpler password (which goes against the usual choose a complicated password rules!)

Cheers

jonshutt commented 5 years ago

Actually, posting the data not putting URL works