Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-4356

Special Characters in application password will break SSO authentication

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a bug
    • Icon: Low Low
    • None
    • 2.8
    • None
    • None

      When an application is configured in Crowd with SSO with a password that includes special characters such as \, the application authentication will fail. So far I've tested and confirmed that the characters !@#$%&*() do not seem to break the application authentication, however, using them may result in the behavior described in https://jira.atlassian.com/browse/CWD-4243

      The Crowd logs contain the following during the failed authentication:

      2015-05-12 12:57:42,956 http-bio-8095-exec-25 INFO [plugin.rest.filter.BasicApplicationAuthenticationFilter] Invalid authentication for application with name 'jira641'

      Steps to Reproduce:

      1. Setup Crowd with SSO enabled
      2. Setup JIRA to use Crowd (with SSO enabled). Use an application password like pass\word
      3. Attempt to log into JIRA and observe login failure

          Form Name

            [CWD-4356] Special Characters in application password will break SSO authentication

            Renata Dornelas made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 103980 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 - restricted [ 1510246 ] New: JAC Bug Workflow v3 [ 3365942 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]

            Deleted Account (Inactive) added a comment -

            I can verify that $ is a legal character and does not need to be escaped for Crowd to accept it.

            Deleted Account (Inactive) added a comment - I can verify that $ is a legal character and does not need to be escaped for Crowd to accept it.
            Owen made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 1393284 ] New: Simplified Crowd Development Workflow v2 - restricted [ 1510246 ]
            James Richards made changes -
            Comment [ A comment with security level 'atlassian-staff' was removed. ]
            Owen made changes -
            Workflow Original: Crowd Development Workflow v2 [ 863828 ] New: Simplified Crowd Development Workflow v2 [ 1393284 ]
            Joe Clark made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 103980 ] New: This issue links to "Page (Atlassian Documentation)" [ 103980 ]
            Tony Starr made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 120841 ] New: This issue links to "Page (Atlassian Documentation)" [ 120841 ]
            Tony Starr made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 103980 ] New: This issue links to "Page (Atlassian Documentation)" [ 103980 ]
            Tony Starr made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 120095 ] New: This issue links to "Page (Atlassian Documentation)" [ 120095 ]

              Unassigned Unassigned
              ddiblasio David Di Blasio
              Affected customers:
              0 This affects my team
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: