Basic Access Authentication: Encoding of ':' and non-ASCII code points

Question

For the base64-user-pass value in the Authorization header, is there a standard/de facto way to base64-encode usernames and passwords which contain code points which don't fit into an OCTET, or usernames which contain a colon (which is explicitly prohibited by RFC 2617)?

Julian Reschke · Accepted Answer · 2016-12-20 20:05:35Z

1

1) Yes, but only proposed and not implemented (AFAIK): https://greenbytes.de/tech/webdav/rfc7617.html#charset

2) No.

answered Dec 20, 2016 at 20:05

Julian Reschke

42.5k8 gold badges103 silver badges102 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

MrBackend Over a year ago

Spot on answer! I guess it is easier to put restrictions on user-ids than on passwords.

Collectives™ on Stack Overflow

Basic Access Authentication: Encoding of ':' and non-ASCII code points

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related