[ python-Bugs-944082 ] urllib2 authentication mishandles empty
password
SourceForge.net
noreply at sourceforge.net
Wed May 5 21:41:58 EDT 2004
Bugs item #944082, was opened at 2004-04-29 02:02
Message generated for change (Comment added) made by loewis
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=944082&group_id=5470
Category: Python Library
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: sc0rp (yangir)
Assigned to: Nobody/Anonymous (nobody)
Summary: urllib2 authentication mishandles empty password
Initial Comment:
If example.org requires authentication, then following
code:
host = 'example.org'
user = 'testuser'
password = ''
url = 'http://%s/' % host
authInfo = urllib2.HTTPPasswordMgrWithDefaultRealm()
authInfo.add_password( None, host, user, password )
authHandler = urllib2.HTTPBasicAuthHandler( authInfo )
opener = urllib2.build_opener( authHandler )
urlFile = opener.open( url )
print urlFile.read()
will die by throwing HTTPError 401:
File "/usr/lib/python2.3/urllib2.py", line 419, in
http_error_default
raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
urllib2.HTTPError: HTTP Error 401: Authorization Required
even if authenticating with 'testuser' and empty
password is valid.
Empty password is mishandled (i.e. authentication with
empty password string is ignored) in
AbstractBasicAuthHandler.retry_http_basic_auth
def retry_http_basic_auth(self, host, req, realm):
user,pw = self.passwd.find_user_password(realm,
host)
if pw:
[...]
It can be fixed by changing:
if pw:
to
if pw is not None:
Python 2.3.2 (#1, Oct 9 2003, 12:03:29)
[GCC 3.3.1 (cygming special)] on cygwin
Type "help", "copyright", "credits" or "license" for more
information.
----------------------------------------------------------------------
>Comment By: Martin v. Löwis (loewis)
Date: 2004-05-06 03:41
Message:
Logged In: YES
user_id=21627
This is fixed with patch #944110.
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=944082&group_id=5470
More information about the Python-bugs-list
mailing list