CODEWITHSUNDEEP
httpbasic-authentication
David Ebbo
David Ebbo

Reputation: 43203

Escaping username characters in basic auth URLs

When using http basic authentication, the username can be passed in the URL, e.g.

http://[email protected]/path/

But now suppose the username is an email address, e.g. [email protected]. Doing this is clearly ambiguous:

http://[email protected]@foo.com/path/

Is there a way to escape the @ character in the username? I tried standard URL encoding:

http://david%[email protected]/path/

But that didn't do it.

Upvotes: 69

Views: 62023

Answers (1)

sagi
sagi

Reputation: 5757

According to RFC 3986, section 3.2.1, it needs to be percent encoded:

  userinfo    = *( unreserved / pct-encoded / sub-delims / ":" )

So it looks like

http://david%[email protected]/path/

Is right. Where are you trying to read it? Maybe you need to manually decode the value?

Upvotes: 95

Related Questions