search

pydio / pydio-core

Pydio 8 official repository
https://pydio.com
GNU Affero General Public License v3.0
869 stars 289 forks source link

401 unauthorised and stopped sync #1463

Open mcr-ksh opened 4 years ago

mcr-ksh commented 4 years ago

Hi,

I've encountered various issues with HTTP 401 leading to a failed authentication and thus stopped synchronisation.

Cause: A URI/filename with a "+" character causes the HMAC256 to fail verification of the server_uri.

Fix: rawurlencode does not convert the "+" sign to a space and the hashes match.

The issue was traced and fixed for us by changing plugins/authfront.keystore/KeystoreAuthFrontend.php array_map urlencode -> rawurlencode

Best MR