From 05735b2a76982994480b658d435ddc03f7914f46 Mon Sep 17 00:00:00 2001 From: Robert von Burg Date: Wed, 13 Mar 2019 20:17:33 +0100 Subject: [PATCH] [Fix] Properly escape password --- bower.json | 2 +- strolch-wc-auth.html | 6 ++---- 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/bower.json b/bower.json index 219eb2f..0deb5f2 100644 --- a/bower.json +++ b/bower.json @@ -1,7 +1,7 @@ { "name": "strolch-wc-auth", "description": "Strolch WebComponent Auth", - "version": "0.7.0", + "version": "0.7.1", "authors": ["Robert von Burg"], "keywords": [ "strolch", diff --git a/strolch-wc-auth.html b/strolch-wc-auth.html index c15bcac..3183d85 100644 --- a/strolch-wc-auth.html +++ b/strolch-wc-auth.html @@ -317,8 +317,7 @@ this.dlgTitle = this.localize('authenticationFailed'); this.$.ajaxAuth.body = { 'username': this.username, - 'password': btoa(this.password), - 'encoding': this.passwordEncoding + 'password': btoa(unescape(encodeURIComponent(this.password))) }; this.$.ajaxAuth.url = this.basePath + 'rest/strolch/authentication'; this.$.ajaxAuth.method = 'POST'; @@ -419,8 +418,7 @@ this.$.ajaxAuth.url = this.basePath + 'rest/strolch/privilege/users/' + this.username + '/password'; this.$.ajaxAuth.method = 'PUT'; this.$.ajaxAuth.body = { - 'password': btoa(this.password1), - 'encoding': this.passwordEncoding + 'password': btoa(unescape(encodeURIComponent(this.password1))) }; this.$.ajaxAuth.generateRequest(); },