Skip to content

fix(core): allow colons inside passwords#29576

Merged
kitlangton merged 4 commits into
anomalyco:devfrom
neriousy:fix/allow-colon-inside-password
May 28, 2026
Merged

fix(core): allow colons inside passwords#29576
kitlangton merged 4 commits into
anomalyco:devfrom
neriousy:fix/allow-colon-inside-password

Conversation

@neriousy
Copy link
Copy Markdown
Contributor

Issue for this PR

Closes #29575

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

The colon : wasn't allowed inside passwords due to how it was splitting by :

If you paste a large clearly AI generated description here your PR may be IGNORED or CLOSED!

How did you verify your code works?

Try to auth with a password containing a colon :

Screenshots / recordings

If this is a UI change, please include a screenshot or recording.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

If you do not follow this template your PR will be automatically rejected.

@kitlangton
Copy link
Copy Markdown
Contributor

Verified locally with bun run test -- test/server/httpapi-ui.test.ts test/server/httpapi-authorization.test.ts and bun typecheck. Splitting decoded Basic credentials at the first colon matches Basic auth semantics and fixes colon-containing passwords. Thanks for the focused regression test.

@kitlangton kitlangton enabled auto-merge (squash) May 28, 2026 01:06
Copy link
Copy Markdown
Contributor

@kitlangton kitlangton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified locally and the decoder change matches HTTP Basic credential semantics. The regression test covers the reported failure path.

@neriousy
Copy link
Copy Markdown
Contributor Author

Seems like the CI got stuck

@neriousy neriousy closed this May 28, 2026
auto-merge was automatically disabled May 28, 2026 15:25

Pull request was closed

@neriousy neriousy reopened this May 28, 2026
@kitlangton kitlangton enabled auto-merge (squash) May 28, 2026 17:17
@kitlangton kitlangton disabled auto-merge May 28, 2026 17:17
@kitlangton kitlangton merged commit 72d008b into anomalyco:dev May 28, 2026
2 checks passed
tranngoclai pushed a commit to tranngoclai/opencode that referenced this pull request May 30, 2026
Co-authored-by: Kit Langton <kit.langton@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Password containing colon (:) rejected by server

2 participants