java - Proxy password containing `@` in JVM -


i have scala code has managed negotiate (ntlm) proxy , access internet, specifying username , password so:

// based upon http://rolandtapken.de/blog/2012-04/java-process-httpproxyuser-and-httpproxypassword authenticator.setdefault(new authenticator() {    override protected def getpasswordauthentication: passwordauthentication = {      if (getrequestortype eq requestortype.proxy) {       val prot = getrequestingprotocol.tolowercase        // allows return passwordauthentication when have       // 4 of host, port, user , password _and_ host ,       // port match actual proxy wanting authentication.       {         host <- option(system.getproperty(prot + ".proxyhost"))         if getrequestinghost.equalsignorecase(host)         port <- try(augmentstring(system.getproperty(prot + ".proxyport")).toint).tooption         if port == getrequestingport         user <- option(system.getproperty(prot + ".proxyuser"))         pass <- option(system.getproperty(prot + ".proxypassword"))       } yield return new passwordauthentication(user, pass.tochararray)     }      // 1 of if-statements failed.  no authentication you!     null   } })

however, i've been given new system username/password combination use, , password contains @ in it. i've tried using password directly, escaping (with both \ , \\ in case double-level of escaping needed), url-encoding (i.e. replacing @ %40) , html-encoding (&commat; , &#64;) no avail.

i know password works, it's used on other systems non-jvm applications access internet setting http_proxy variable, doesn't work here.

any ideas?

edit

to try , clear things up, i've tried simplifying code this:

authenticator.setdefault(new authenticator() {    def urlencode(str: string): string = {     val res = urlencoder.encode(str, "utf-8")     // confirm it's working     println(s"${str} -> ${res}")     res   }    override protected def getpasswordauthentication: passwordauthentication = {      if (getrequestortype eq requestortype.proxy) {        return new passwordauthentication(urlencode("username"), urlencode("p@ssword").tochararray);     }     null   }  })

the environment being run in in spark cluster (run spark-submit) on linux box. proxy corporate ntlm one.

if use known username , password combination doesn't contain @ works. if change 1 containing @ fails.

i've tried making val res = str inside urlencode function (in case doesn't need url encoded), tried having \\@ (with , without url encoding) , ^@ (with , without url encoding). every single time exception of unable tunnel through proxy. proxy returns "http/1.1 407 proxy authorization required".

i know username , password valid set in https_proxy variable used curl, etc.

so unless fact proxy being set within running spark server somehow affects happens it, appears me jvm libraries not support having @ in authenticator proxies (at least).

the problem not within java.net library code (edit: http basic proxies, have not yet been able test ntlm proxies). java.net code can connect fine using passwords "@" in them. have put demo code below allows verify claim.

you not need escape string value pass java.net.passwordauthentication, should pass password in plaintext there. java.net library code take care of encoding password necessary when sending on network proxy (see demo code below verify claim).

i believe problem must in way configuring system outside of code have included in question far.

for example, have passed proxy hostname jvm or nearby system in such way confused "@" symbol?

please can provide more context?

demo code verify java.net library code can cope "@" in password

this code includes instructions on setting fiddler2 http proxy on local machine, configuring fiddler2 require password, , connecting through proxy using java.net library classes.

the code runs me as-is, , fails if change "password" variable incorrect password.

import java.io.bufferedreader; import java.io.inputstream; import java.io.inputstreamreader; import java.net.authenticator; import java.net.passwordauthentication; import java.net.url; import java.util.base64;  public class q45749081 {      public static void main(string[] args) throws exception {          // start fiddler http proxy https://www.telerik.com/download/fiddler         // click "rules" -> "require proxy authentication"         // type "quickexec" box below fiddler's web sessions list:         //    prefs set fiddler.proxy.creds dxnlcm5hbwu6cebzc3dvcmq=         //         // sets fiddler require auth "username", "p@ssword"         //         // see https://stackoverflow.com/questions/18259969/changing-username-and-password-of-fiddler-proxy-server          // note must start new process each time change password         // here, sun.net.www.protocol.http.httpurlconnection caches proxy password         // lifetime of jvm process         string password = "p@ssword";          system.out.println(             "prefs set fiddler.proxy.creds " +             base64.getencoder().encodetostring("username:p@ssword".getbytes()));          authenticator.setdefault(new authenticator() {             @override             protected passwordauthentication getpasswordauthentication() {                 return new passwordauthentication(                     "username",                     password.tochararray());             }         });           system.setproperty("http.proxyhost", "localhost");         system.setproperty("http.proxyport", "8888");          system.out.println("connecting google via authenticated proxy password '"             + password + "'");         try (inputstream conn = new url("http://www.google.com/").openstream()) {             try (bufferedreader r = new bufferedreader(new inputstreamreader(conn))) {                 system.out.println(r.readline());                 system.out.println("ok");             }         } catch (exception e) {             system.out.println("failed: " + e);         }     } }

first answer:

the code have shown taking password jvm system property. how putting password property? suspect problem lies there, rather in code have shown.

if on windows, , if setting password command-line argument, need use dos escape char "^", i.e.

java -dhttp.proxypassword=foo^@bar -jar myapp.jar

if use mechanism provide password java, may need different escaping scheme.


Comments

Post a Comment

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

i'm using class based views in django , never specify url in ajax calls , omit action parameter in form because know these requests go through post method of class based view. notice view - profile page make many requests depending on user updating on page - post method become convoluted , if/else mess example: def post(self, request, *args, **kwargs): # handle user changing available date if request.post.get('availabledate') != none: self.updateavailabledate(request) return jsonresponse({'result':'success'}) if request.post.get('newprojectname') != none: creative_user = creativeuserprofile.objects.get(id = request.user.id) project = project.create_project(creative_user, request.post['newprojectname']) project.save() return jsonresponse({'projectid': project.id }) if request.post.get('projectimage') != none , request.files['file']: proj...
Read more

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

i'm doing micro-optimization on performance critical part of code , came across sequence of instructions (in at&t syntax): add %rax, %rbx mov %rdx, %rax mov %rbx, %rdx i thought had use case xchg allow me shave instruction , write: add %rbx, %rax xchg %rax, %rdx however, dimay found agner fog's instruction tables , xchg 3 micro-op instruction 2 cycle latency on sandy bridge, ivy bridge, broadwell, haswell , skylake. 3 whole micro-ops , 2 cycles of latency! 3 micro-ops throws off 4-1-1-1 cadence , 2 cycle latency makes worse original in best case since last 2 instructions in original might execute in parallel. now... cpu might breaking instruction micro-ops equivalent to: mov %rax, %tmp mov %rdx, %rax mov %tmp, %rdx where tmp anonymous internal register , suppose last 2 micro-ops run in parallel latency 2 cycles. given register renaming occurs on these micro-architectures, though, doesn't make sense me done way. why wouldn't register renamer ...
Read more

c# - Asp.net web api : redirect unauthorized requst to forbidden page -

im trying redirect unauthorized request forbidden page instead i'm getting forbidden page in response body , how can fix ? here's startup class : app.createperowincontext(storecontext.create); app.createperowincontext<applicationusermanager>(applicationusermanager.create); app.createperowincontext<applicationsigninmanager>(applicationsigninmanager.create); app.usecookieauthentication(new cookieauthenticationoptions { authenticationtype = defaultauthenticationtypes.applicationcookie, expiretimespan = timespan.fromdays(30), }); app.useexternalsignincookie(defaultauthenticationtypes.externalcookie); app.usetwofactorsignincookie(defaultauthenticationtypes.twofactorcookie, timespan.fromminutes(5)); app.usetwofactorrememberbrowsercookie(defaultauthenticationtypes.twofactorrememberbrowsercookie); the method im trying reach : [httpget] [authorize(roles = "admin")] public string getcurrentusername() { return userman...
Read more