Search code examples
httpbasic-authentication

Escaping username characters in basic auth URLs

When using http basic authentication, the username can be passed in the URL, e.g.

http://[email protected]/path/

But now suppose the username is an email address, e.g. [email protected]. Doing this is clearly ambiguous:

http://[email protected]@foo.com/path/

Is there a way to escape the @ character in the username? I tried standard URL encoding:

http://david%[email protected]/path/

But that didn't do it.

Solution

  • According to RFC 3986, section 3.2.1, it needs to be percent encoded:

      userinfo    = *( unreserved / pct-encoded / sub-delims / ":" )

    So it looks like

    http://david%[email protected]/path/

    Is right. Where are you trying to read it? Maybe you need to manually decode the value?