usefulteam / jwt-auth

WordPress JSON Web Token Authentication
https://wordpress.org/plugins/jwt-auth/
116 stars 49 forks source link

Passwords with special characters don't work #106

Closed davidhealey closed 1 year ago

davidhealey commented 1 year ago

A password such as ,;:./?+-_*!”£$%^&() works via wordpress login, but fails with JWT Auth. What’s the solution?

pesseba commented 1 year ago

I tested it and the password supplied works...

image

davidhealey commented 1 year ago

Thank you. For anyone else, this has lead me to figure out that the issue I'm having is caused by the mod security rules of my server. Specifically it's this: REQUEST-901-INITIALIZATION.conf

RpGmAx commented 4 days ago

Hi,

I have the same problem but only with apostrophes.

Fixed with a change in class-auth.php, addslashes fx added (like I did before on the wp-api-jwt-auth plugin). $user = wp_authenticate($username, addslashes($password));

@pesseba can you check ?

Thank you :)