Basic Auth in URL escaping ?

[spras]

Current behavior:

I can't test with basic authentication in URL because of some special character in password.

Steps to reproduce: (app code and test code)

Please see this example : http://github.com/spras/issue-cypress

There's a docker nginx config with basic authentication

two users:password are authorized:

user:pass
userIssue:*Y7QcbKRcGKze\5d

when we test basic auth via browser it'ok.

when we test basic auth via curl it'ok, escaping the * and the \ of the password :

curl http://user:pass@localhost
curl http://userIssue:\*Y7QcbKRcGKze\\5d@localhost

are fine

CYPRESS_baseUrl=http://user:pass@localhost $(npm bin)/cypress open

It's perfectly fine

CYPRESS_baseUrl=http://userIssue:\*Y7QcbKRcGKze\\5d@localhost/ $(npm bin)/cypress open

Doesn't work :

[jennifer-shehane]

Can you attempt to call cy.visit() with the basic auth url pasted directly into the cy.visit() command, not using the baseUrl from the config? What is the result when you do this?

I want to see if this is isolated to the baseUrl since there have been issues with this config and basic auth. #1598

Also, it's hard to tell if this is the actual url it is visiting or if this is just Cypress escaping the characters when showing the text of the error messages.

Could you run the following command to open Cypress and click on the failing test? Then please paste the logs here. This should log the actual url request that went out:

DEBUG=cypress:server:request cypress open

It should look something like this:

cypress:server:request sending request as stream { auth: null, failOnStatusCode: true, method: 'GET', body: null, headers: { accept: 'text/html,/', 'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36' }, gzip: false, url: 'https://examples.cypress.io/commands/actions', followRedirect: [Function], strictSSL: false }

[spras]

Some precisions :

Using URLEncode \=> %5C solve the problème in firefox but not in chrome

Open a private window in firefox , put http://userIssue:*Y7QcbKRcGKze%5C5d@localhost in the address bar, it is OK

Open a private window in chrome , put http://userIssue:*Y7QcbKRcGKze%5C5d@localhost in the address bar, it is KO, the open the user / password prompt

When testing it on cypress :
CYPRESS_baseUrl=http://userIssue:*Y7QcbKRcGKze%5C5d@localhost/ $(npm bin)/cypress open

I haven't the warning anymore, but when i run the test, there's a 401 error

[spras]

I tried with the DEBUG=cypress:server:request parameter.

With baseUrl and cy.visit('/') i get this :

cypress:server:request sending request as stream { 
  auth: { 
    username: 'userIssue', 
    password: '*Y7QcbKRcGKze%5C5d' 
  }, 
  failOnStatusCode: true, 
  method: 'GET', 
  body: null, 
  headers: { accept: 'text/html,*/*', 'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36' }, 
  gzip: false, 
  url: 'http://localhost/', 
  followRedirect: [Function], 
  strictSSL: false 
} +0ms
cypress:server:request setting request jar cookies [] +131ms

without baseUrl and cy.visit('http://userIssue:*Y7QcbKRcGKze%5C5d@localhost/') i get this:

cypress:server:request sending request as stream { 
  auth: { 
    username: 'userIssue', 
    password: '*Y7QcbKRcGKze%5C5d' 
  }, 
  failOnStatusCode: true, 
  method: 'GET', 
  body: null, 
  headers: { accept: 'text/html,*/*', 'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36' }, 
  gzip: false, 
  url: 'http://localhost/', 
  followRedirect: [Function], 
  strictSSL: false 
} +0ms
cypress:server:request setting request jar cookies [] +87ms

in both cases, the test give a 401 error

When i doesn't urlencode the password, and try cy.visit('http://userIssue:*Y7QcbKRcGKze\\5d@localhost/')

i get the Error: getaddrinfo ENOTFOUND userissue userissue:80

cypress:server:request sending request as stream { 
  auth: null, 
  failOnStatusCode: true, 
  method: 'GET', 
  body: null, 
  headers: { accept: 'text/html,*/*', 'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36' }, 
  gzip: false, 
  url: 'http://userissue/:*y7qcbkrcgkze/5d@localhost/', 
  followRedirect: [Function], 
  strictSSL: false 
} +0ms

[allista]

I have the same problem, but in my case nothing helps, as the password ENDS with the '@' symbol.

[cypress-app-bot]

This issue has not had any activity in 180 days. Cypress evolves quickly and the reported behavior should be tested on the latest version of Cypress to verify the behavior is still occurring. It will be closed in 14 days if no updates are provided.

[cypress-app-bot]

This issue has been closed due to inactivity.