Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-7964

[Java Client, AMQP 0-x] SCRAM SASL implementation incorrectly encodes "=" and "," for passwords

    XMLWordPrintableJSON

Details

    Description

      Currently the Qpid Client for Java for AMQP 0-x encodes the characters "=" and "," in passwords when using the SCRAM SASL mechanism.
      This is incorrect. The spec requires encoding of those characters for the username. Not for the password.

      This was reported on the user mailing list

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. QPIDJMS-335 SCRAM-SHA mechanism impls erroneously escape "=" and "," in the password during processing

          • Major - Major loss of function.
          • Closed

          Activity

            People

              Unassigned Unassigned
              lorenz.quack Lorenz Quack
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: