Closed pdellaert closed 3 years ago
According to https://datatracker.ietf.org/doc/html/rfc7617#section-2, the Basic Authentication scheme supports regular Base64 encoding, with a reference to https://datatracker.ietf.org/doc/html/rfc4648#section-4 for the implementation of the regular implementation (supporting/allowing the /
and +
characters).
There is no need to use the urlsafe_b64encode
method.
Bambou uses
urlsafe_b64encode
, which replaces the + and / character with _ to be URL Safe. However, this causes issues in certain cases where the VSD expects a an actual + or / character.Example: Creating a user with username
genericuser
and passwordprefixadmin~suffix
will fail because of the failure of encoding the Authrozation header:This causes the authentication to fail.