Description:
When a system user's token contains special characters such as &, $, #, %, or @, the UI fails to authenticate with the FTS API. The login page shows "Wrong User or Password" even though credentials are correct. No error is logged.
Possible Root cause:
The token is passed via the Authorization: Bearer header (line 44 of base/routes.py), and also through systemd Environment= directives. Special characters can break URL encoding, shell variable expansion, or HTTP header parsing along this chain.
Reproduction:
Set a system user token to something like iCyp8m&z2$#%m@XDV^@m, restart services, and attempt login.
Workaround: Use only alphanumeric tokens.
Version: FTS 2.2.1, FreeTAKServer-UI 2.2.1, Ubuntu 22.04
Description:
When a system user's token contains special characters such as &, $, #, %, or @, the UI fails to authenticate with the FTS API. The login page shows "Wrong User or Password" even though credentials are correct. No error is logged.
Possible Root cause:
The token is passed via the Authorization: Bearer header (line 44 of base/routes.py), and also through systemd Environment= directives. Special characters can break URL encoding, shell variable expansion, or HTTP header parsing along this chain.
Reproduction:
Set a system user token to something like iCyp8m&z2$#%m@XDV^@m, restart services, and attempt login.
Workaround: Use only alphanumeric tokens.
Version: FTS 2.2.1, FreeTAKServer-UI 2.2.1, Ubuntu 22.04