cordova-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Grieve (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-52) API: FileTransfer - Basic Authentication
Date Sat, 16 Mar 2013 13:04:12 GMT

    [ https://issues.apache.org/jira/browse/CB-52?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13604237#comment-13604237
] 

Andrew Grieve commented on CB-52:
---------------------------------

ah, okay. So if their user/pass has symbols in it, they should encodeURIComponent on it.

JS has base64: atob()

With your patch, it may mean that there is an extra back-and-forth that happens? ie - if we
detect the username & password before sending the initial request, we might save a round
trip.

The wikipedia article suggests that servers should understand the username & password
if it exists in the URL. Are you sure your code even gets run (the server rejects the initial
request) when the creds are in the url?
                
> API: FileTransfer - Basic Authentication
> ----------------------------------------
>
>                 Key: CB-52
>                 URL: https://issues.apache.org/jira/browse/CB-52
>             Project: Apache Cordova
>          Issue Type: New Feature
>          Components: iOS
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>            Priority: Minor
>             Fix For: 2.6.0
>
>         Attachments: patch_commit_e6a2ffb1defb.patch
>
>
> reported at: https://github.com/phonegap/phonegap-iphone/issues/177
> by: https://github.com/berb
> (This feature request is platform-agnostic and has been posted here due to the comments
in #phonegap)
> I'd appreciate an optional parameter for FileUploadOptions allowing to pass Basic Authentication
credentials. Combined with HTTPS, Basic Authentication can introduce minimal security when
upload files.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message