Handle Unicode characters in httpd auth headers

Depends on ManageIQ/manageiq#21171
Fryguy · Apr 21, 2021 · 73ee0df · 73ee0df
1 parent abf5c3b
commit 73ee0df
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/controllers/api/base_controller/authentication.rb b/app/controllers/api/base_controller/authentication.rb
@@ -146,7 +146,8 @@ def valid_ui_session?
 
       def authenticate_with_jwt
         timeout = ::Settings.api.authentication_timeout.to_i_with_method
-        user = User.authenticate(request.headers["X-REMOTE-USER"], "", request, :require_user => true, :timeout => timeout)
+        user_header = request.headers["X-REMOTE-USER"]&.force_encoding("UTF-8")
+        user = User.authenticate(user_header, "", request, :require_user => true, :timeout => timeout)
         auth_user(user.userid)
       rescue => e
         raise AuthenticationError, "Failed to Authenticate with JWT - error #{e}"