[gatein-issues] [JBoss JIRA] (GTNPORTAL-3101) Encoding issue when login with password containing non-ASCII characters

[Marek Posolda (JIRA)]

     [ https://issues.jboss.org/browse/GTNPORTAL-3101?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marek Posolda updated GTNPORTAL-3101:
-------------------------------------

              Description: 
Steps to reproduce:
- Login as root, Go to http://localhost:8080/portal/g/:organization:management:executive-board/organization/newStaff and register user with password: aaa£aaa
- Logout as root and try to login as new user. Login won't be successful

Reason: Form for saving new user handles usecase correctly and it correctly save password aaa£aaa into Picketlink IDM DB. Problem seems to be during login as LoginServlet doesn't decode parameters from URL in UTF-8 . It seems that it's using ISO-8859-1 as password is decoded in LoginServlet with value: aaa£aaa

Fix: We should trigger request.setCharacterEncoding("UTF-8") in LoginServlet to ensure that params will be decoded with UTF-8 and password will be correctly decoded as: aaa£aaa

  was:
Steps to reproduce:
- Login as root, Go to http://localhost:8080/portal/g/:organization:management:executive-board/organization/newStaff and register user with password: aaa£aaa
- Logout as root and try to login as new user. Login won't be successful

Reason: Form for saving new user handles usecase correctly and it correctly save password aaa£aaa into DB. Problem seems to be during login as LoginServlet doesn't decode parameters from URL in UTF-8 . It seems that it's using ISO-8859-1 as password is decoded in LoginServlet with value: aaa£aaa

Fix: We should trigger request.setCharacterEncoding("UTF-8") in LoginServlet to ensure that params will be decoded with UTF-8 and password will be correctly decoded as: aaa£aaa

    SourceForge Reference: https://c.na7.visual.force.com/apex/Case_View?id=500A000000DOII3IAP&sfdc.override=1

    
> Encoding issue when login with password containing non-ASCII characters
> -----------------------------------------------------------------------
>
>                 Key: GTNPORTAL-3101
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-3101
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>    Affects Versions: 3.6.0.Beta02
>            Reporter: Marek Posolda
>            Assignee: Marek Posolda
>             Fix For: 3.6.0.Final
>
>
> Steps to reproduce:
> - Login as root, Go to http://localhost:8080/portal/g/:organization:management:executive-board/organization/newStaff and register user with password: aaa£aaa
> - Logout as root and try to login as new user. Login won't be successful
> Reason: Form for saving new user handles usecase correctly and it correctly save password aaa£aaa into Picketlink IDM DB. Problem seems to be during login as LoginServlet doesn't decode parameters from URL in UTF-8 . It seems that it's using ISO-8859-1 as password is decoded in LoginServlet with value: aaa£aaa
> Fix: We should trigger request.setCharacterEncoding("UTF-8") in LoginServlet to ensure that params will be decoded with UTF-8 and password will be correctly decoded as: aaa£aaa

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira