nextcloud / nextcloud/passman

Password causes issues

Open
#319 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs testing Security
Dominant language
JavaScript
Stars
823
Forks
117
Avg merge
1d 21h
Merged PRs (30d)
8

Description

Bug report

The password @>;)eEf$LjN+47CIRSP5RzN@q^JcEpH%EFEx}{P^}CK/%h+)}u has caused some issues when saving.

I think this issue is related/similar to https://github.com/nextcloud/passman/issues/312.

And really, this is a no-go. Can't you at least save these passwords reliably? Of course, this does not only affect passwords, but these are considered to be generated randomly and contain all strange characters in any order.

Steps to reproduce
  1. Use this password/enter it…
Expected behaviour

Login works.

Actual behaviour

Login fails, password seems to be modified.

Configuration

Operating system: Linux

Browser: Firefox

Passman version: 2.1.2

PHP version: 7

cloud server: Nextcloud

cloud version: 12


Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Reproduce the failure in Passman 2.1.2 on Nextcloud 12 using the supplied password, then inspect the password save and login entry points and compare the behavior with issue 312. Done means the password is preserved reliably and login succeeds with it.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, php
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.