Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-8425

HTTP basic auth username / password longer than 64 characters

XMLWordPrintable

    • Team D
    • Sprint 99 (Apr 2023), Sprint 100 (May 2023)
    • 1

      Steps to reproduce:

      1. Create a HTTP agent item
      2. Change HTTP authentication to "Basic"
      3. Attempt to input either username or password exceeding 64 characters in length.
      4. (Additionally) Set a macro to the desired string, and use said macro in the username or pasword field of the item instead.

      Result:

      Field length is limited to 64 characters. Additional input is discarded. For anything that uses HTTP Basic usernames / passwords that exceed 64 characters, it's impossible to enter the entire string.

      (Addittionally) When a macro is used for the HTTP username / password, the resulting Basic authorization header omits a username / password that exceeds 64 characters in length. As an example, having an 80 character user and 80 character password will return a header who's value is "Og==", which decodes to ":".

      Expected:

      Field should allow inputting of strings longer than 64 characters for cases where a username / password exceed 64 characters in length (e.g., OPNsense's API key / API secret, which are 80 characters, hard-coded)

       

      (Additionally) When using a macro that exceeds 64 characters in length, the value should be included in the HTTP authorization header as usual, instead of being completely absent.

        1. ZBX-19181.patch
          4 kB
        2. screenshot-2.png
          screenshot-2.png
          21 kB
        3. screenshot-1.png
          screenshot-1.png
          11 kB
        4. input_params.php
          0.3 kB
        5. image-2023-05-17-11-20-55-340.png
          image-2023-05-17-11-20-55-340.png
          6 kB
        6. image-2023-05-16-09-13-48-896.png
          image-2023-05-16-09-13-48-896.png
          27 kB

            jfreibergs Janis Freibergs
            Teknikal_Domain Jackson W
            Team D
            Votes:
            5 Vote for this issue
            Watchers:
            19 Start watching this issue

              Created:
              Updated:
              Resolved: