Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of vavra@602.cz designates
 209.85.215.48 as permitted sender)
Message-ID: <51C82F5B.8050300@602.cz>
Date: Mon, 24 Jun 2013 13:36:59 +0200
From: =?ISO-8859-2?Q?Jan_V=E1vra?= <vavra@602.cz>
User-Agent: Mozilla/5.0 (Windows NT 6.1;
 rv:17.0) Gecko/20130509 Thunderbird/17.0.6
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: FORM based authentication and utf-8 encoding of credentials
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 8bit

Hello,
  I'm successfully using form based authenntication when login or 
password contains only letters from English alphabet. I have also 
written own realm.

When I create user with password with czech String "�e�Uli�ka.1" the 
browser sends correctly this string as:

POST http://localhost:70/myapp/j_security_check HTTP/1.1
Content-Type: application/x-www-form-urlencoded

j_username=p&j_password=%C5%BDe%C5%BEUli%C4%8Dka.1

The first letter "�" is really encoded in the utf-8 as bytes in hexa C5, BD.
But in the method public Principal authenticate(String username, String 
credentials) the parameter credentials has first two bytes C3, 85.

In my login.jsp I have these relevant parts:
<%
   request.setCharacterEncoding("UTF-8");
%>
<html>
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
...
<form method="POST" action="j_security_check" accept-charset="utf-8">

and also tomcat is telling in the http response header:
Content-Type: text/html;charset=UTF-8


But nothing of it forced Tomcat to translate password correctly from 
utf-8 string.
Even the manual reencoding in authenticate(.) doesn't help:
credentials = new String(credentials.getBytes(),"utf-8")
Because the received bytes of first letter are C3, 85 instead of 
expected C5, BD.

Any idea how to tell tomcat to use utf-8 in form based authentication?
It's tomcat 7.0.34 on Czech Windows 7 32 bit with default ansi code page 
set as Windows-1250.

Thanks
Jan.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org