nice catch

On 9/10/10 3:25 AM, Felix Meschberger (JIRA) wrote:
> Form based authentication fails if the user id contains an '@' character
> ------------------------------------------------------------------------
> 
>                  Key: SLING-1744
>                  URL: https://issues.apache.org/jira/browse/SLING-1744
>              Project: Sling
>           Issue Type: Bug
>           Components: Authentication
>     Affects Versions: Form Based Authentication 1.0.0
>             Reporter: Felix Meschberger
>             Assignee: Felix Meschberger
>              Fix For: Form Based Authentication 1.0.2
> 
> 
> If the id of a user contains an '@' character, which is used by the form 
> based authentication handler to separate the fields in the cookie value, the 
> handler does not work because the cookie value --- e.g. 
> ccf4b91c4eebc3cbd23c24918cc050e28fdd7...@31284110502326@[email protected] 
> --- is now split into four parts instead of three.
> 

Reply via email to