Password is url encoded resulting in "The Bluemix credentials you entered don't appear to be valid. Please try again." - ibm-cloud

I'm trying to create a new warehouse from the Cloudant dashboard, but receive the following error message:
The Bluemix credentials you entered don't appear to be valid. Please try again.
I had a look at the network traffic and noticed the following url:
https://...cloudant.com/_api/v2/partners/dashdb/warehouse/account?
bluemix_username=...&bluemix_password=...%26...
I checked my password and there was an ampersand in it & which looks as though it has been url encoded.
Do I need to remove any characters from my password that could get urlencoded to a different value?

I removed the & character from my password and I was able to enter my credentials without problem.
I'll leave this Q&A here in case any one else experiences this issue.

Related

Keycloak Identity Broker - Possible to create invalid User-Accounts

When using Keycloak as an Identity Broker there seems to be an issue with some usernames. Default behavior of Keycloak is that when some info (username/email/firstname/lastname) is missing the "Update Account Information" is displayed.
So far so good. The issue though is that you can actually save an invalid username that way, e.g. (asd/fölkj - notice the slash). Now I basically created a broken user that can no longer be modified, not even using the Admin-UI:
[
You can't save it like that because the username is invalid, but you can't change the username since it is read-only.
This seems to be a bug. The bigger issue for me though is that the IDP we are connecting to does not return the email-claim (otherwise I could use that as username too). It only returns a "sub" and since sadly this DOES contain slashes the account is broken if the user does not pick another username. I took a look at the "UsernameTemplateMapper", but they seem a bit limited. Is there any way to just remove all slashes from the "sub"-claim and STILL use it as default username?

JasperSoft visualize.js auth performs GET - password in Query String

I'm just starting with Visualize.js to embedd jasper reports in a web page.
The first hurdle I ran into was authenticating to the server. It kept failing with "Authentication Error"
Okay, double check password, still no worky. After tracking the requests, and following the same steps to authenticate to the server directly, I discovered that when using visualize.js, it places the userID/pwd in the query string and performs a GET request. WHAT!? The problem was that I had special characters in the password that were not URL friendly. So, not only are they putting clear text passwords in the request URL, they aren't bothering to URL encode it.
I fixed it by encoding it myself, but this is blasphemy if you ask me. The userID and password will be in clear text in the request whether you are using SSL/TSL or not. Why on earth aren't they doing a POST?
So, the actual question: Is there a way to configure this to use POST instead of GET for the auth process?
This code does work, but again it is processed as a GET. The standard jasper login page does not do that.
visualize({
server: "http://myseverurl/jasperserver-pro",
auth: {
name : "myUserID",
password: encodeURIComponent("myWierdPassword**+&&&")
}
}, function(v){
alert('in callback');
}, function(err){
alert("ERROR: " + JSON.stringify(err));
});

Include ampersand '&' and '+' special characters in password as OAuth 2 request [duplicate]

I am having a wired issue in my AngularJs application. When user is trying to login to the app and if the password contains ampersand (&), then it couldn't able to validate the user.
I am using OWIN, oAuth2.0 JWT token to validate my Asp.Net Web APIs.
When i debug i found that if the password contains ampersand (&), then it is truncating all the characters from ampersand (&).
For example, if the password is 'x&x' the OAuthValidateClientAuthenticationContext context is getting only 'x' in password value.
I have attached a screen shot of the issue click to see the issue..
Any help on this issue, would be highly appreciated.
Am guessing the value is being interpreted as a query string separator.
Try using the javascript method
encodeURI()
Or
EncodeURIcomponent()
On your password value before posting to the server, so the ampersand becomes
&
The server will decode this for you.
You'll probably find that slashes and question marks will also not work in passwords if you dont
I had the same issue with an anguar project while entering special characters(ex: &, +) in password field. Encoding password with encodeURIComponent did the trick:
"&password=" + encodeURIComponent(password)
Hope it helps

Sendkeys not workining fine

I'm trying to send username and password to gmail through sendkeys.But the problem is if i type sumanth as username here,in the gmail page it will come as ssuumanth and for password also same problem.
Please let me know where i'm wrong.
The image file contains the script.

Configurating JOOMLA's e-mail notification for new account

I'm using Joomla 1.5 to create a local site for my office. The site will be accessed locally via intranet, and my PC will be the localhost for the site.
I'm using a Login pluggin, so that anyone who wanted to enter the site should create an account.
In JOOMLA, all user who created their account for the first time will receive a notification e-mail like :
"Hello pras,
You have been added as a User to Information Center by an
Administrator.
This e-mail contains your username and password to log in to
http://localhost/yaddayadda/
Username: hadisuryo.prasetio Password: xxxx
Please do not respond to this message as it is automatically generated
and is for information purposes only."
but if the user click the URL in the mail, which is, "localhost/yaddayadda/" they will not be directed to my site, but to their own PC's localhost....
My question is : How can I Modified the e-mail or the site configuration so that the URL will not be "localhost/yaddayadda/" anymore, but will be "(My-IP address)/yaddayadda"
I'm not going to host my site to a web hosting service, just using my PC as a host.
I've been trying to trace on each config and .ini files...it seems that i have to do something with the "JURI" function or the "$mosConfig_live_site" on the backlink.php file
$mosConfig_absolute_path = JPATH_SITE;
$mosConfig_live_site = JURI :: base();
$url_array = explode('/', $_SERVER['REQUEST_URI']);
Can anyone give me assistance ?
actually what the joomla does it takes the value as $_SERVER for the host so what you have to do u just append "/yaddayadda" at the email template of the joomla
You could edit:
%SITE_ROOT%/administrator/language/en-GB.com_users.ini at around LINE 28, which reads
NEW_USER_MESSAGE=Hello %s,\n\n\nYou have been added as a User to %s by an Administrator.\n\nThis e-mail contains your username and password to log in to %s\n\nUsername: %s\nPassword: %s\n\n\nPlease do not respond to this message as it is automatically generated and is for information purposes only.
Be careful with the '%s' variable as it appears to insert different values in each instance. First instance renders their NAME, second SITE NAME, third one is the USER NAME, etc, etc.
-Dennis
You can find those values in root/components/com_users/models/registration.php on line 88. It appears it pulls it out of the array that is being created their.