eclipse-ee4j / eclipse-ee4j/jersey
oauth1-server excluding all 'application/x-www-form-urlencoded' requests with Content-Type parameters from OAuth1 signature base string
Open
Component: security
Priority: Critical
pull-request
Type: Bug
- Dominant language
- Java
- Stars
- 730
- Forks
- 382
- PR merge metrics
- No merged PRs in 30d
Description
There is an issue with the oauth1-server package that is not treating requests with a content type like application/x-www-form-urlencoded; charset=UTF-8.
#### Affected Versions
[2.0]
Contributor guide
Research direction
The issue names the oauth1-server package but no source file or test. First locate the OAuth1 signature-base-string construction and its content-type handling, then reproduce a request using application/x-www-form-urlencoded; charset=UTF-8. Done means parameterized content types are handled correctly and a regression test covers the case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100