API - possible bug related to password v5.2

SwayDev2 years ago

Hello,

This may be a bug, however, sharing it here first in case this is a known issue or limitations.

Created an account on Traccar, and set the password to "santoor@6&&Z00" noticed that the WEB UI I was able to Login, however when trying to Login via the API it did not work, so changed the password to a simpler one and tried it worked details shared below

Password: 12345678
Worked on Web
Worked on API

Password: Sigdirt@1234
Worked on Web
Worked on API

Password: santoor@6&&Z00
Worked on Web
Did not work on API

Note: all passwords above are safe to share online (not in use any longer)

SwayDev2 years ago

Additional information: When trying the password that did not work on API, there is a "Login failed" entry being created in log.

Anton Tananaev2 years ago

Well, the web app uses the same API, so I don't think it's possible. Compare your requests with what the web app sends.

SwayDev2 years ago

True, I was only comparing the request which looked the same and not the actual data being passed.

A deeper dive is required, most probably it has to be a problem with how our system handles special characters before passing it to the API.

So it does not look like a Traccar Issue. :)

Thank you