Skip to content

Using URLDecoder for HTTP Basic Authorization in spring authorization server #2190

@ZuoJunLN

Description

@ZuoJunLN

Describe the bug
In file ClientSecreBasicAuthenticationConverter.java line 85, in here using URLDecoder to decode client secret, it will require the password can't contain "+".

To Reproduce
when you use client credential which include "+" in password, it will fail the authorization

Expected behavior
instead of using URLDecoder, can we use Base64?

Sample

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions