Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-4356

Special Characters in application password will break SSO authentication

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a bug
    • Icon: Low Low
    • None
    • 2.8
    • None
    • None

      When an application is configured in Crowd with SSO with a password that includes special characters such as \, the application authentication will fail. So far I've tested and confirmed that the characters !@#$%&*() do not seem to break the application authentication, however, using them may result in the behavior described in https://jira.atlassian.com/browse/CWD-4243

      The Crowd logs contain the following during the failed authentication:

      2015-05-12 12:57:42,956 http-bio-8095-exec-25 INFO [plugin.rest.filter.BasicApplicationAuthenticationFilter] Invalid authentication for application with name 'jira641'

      Steps to Reproduce:

      1. Setup Crowd with SSO enabled
      2. Setup JIRA to use Crowd (with SSO enabled). Use an application password like pass\word
      3. Attempt to log into JIRA and observe login failure

            [CWD-4356] Special Characters in application password will break SSO authentication

            Renata Dornelas made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 103980 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 - restricted [ 1510246 ] New: JAC Bug Workflow v3 [ 3365942 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]

            Deleted Account (Inactive) added a comment -

            I can verify that $ is a legal character and does not need to be escaped for Crowd to accept it.

            Deleted Account (Inactive) added a comment - I can verify that $ is a legal character and does not need to be escaped for Crowd to accept it.
            Owen made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 1393284 ] New: Simplified Crowd Development Workflow v2 - restricted [ 1510246 ]
            James Richards made changes -
            Comment [ A comment with security level 'atlassian-staff' was removed. ]
            Owen made changes -
            Workflow Original: Crowd Development Workflow v2 [ 863828 ] New: Simplified Crowd Development Workflow v2 [ 1393284 ]
            Joe Clark made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 103980 ] New: This issue links to "Page (Atlassian Documentation)" [ 103980 ]
            Tony Starr made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 120841 ] New: This issue links to "Page (Atlassian Documentation)" [ 120841 ]
            Tony Starr made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 103980 ] New: This issue links to "Page (Atlassian Documentation)" [ 103980 ]
            Tony Starr made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 120095 ] New: This issue links to "Page (Atlassian Documentation)" [ 120095 ]

              Unassigned Unassigned
              ddiblasio David Di Blasio
              Affected customers:
              0 This affects my team
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: