Users with Hyphens cannot authenticate with JWT

tsgrp / HPI

OpenContent Management Suite (OCMS)

http://www.tsgrp.com/products

17 stars 5 forks source link

Users with Hyphens cannot authenticate with JWT #2337

Closed abrown45 closed 3 years ago

abrown45 commented 3 years ago

Issue

the ocUser cookie is scrubbed of hyphens so usernames with hyphens are failing to authenticate. The fix is to add the dash to approved cookie chars.

abrown45 commented 3 years ago

Closed with commit 26182 SANITIZE COOKIE FIX - adding dash to allowed chars for the cookie allowing usernames that contain a dash. GH: https://github.com/tsgrp/HPI/issues/2337

CR: skovacinski, nengerer