account: handle URL-encoded passwords (fixes #273)

2 files changed, 5 insertions, 3 deletions

diff --git a/src/account.c b/src/account.c
index e23d5c8..c3f26eb 100644
--- a/src/account.c
+++ b/src/account.c
@@ -396,7 +396,9 @@ int account_alloc(struct account **accp, const char *sipaddr)
 			goto out;
 	}
 	else {
-		err = pl_strdup(&acc->auth_pass, &acc->laddr.uri.password);
+		err = re_sdprintf(&acc->auth_pass, "%H",
+				  uri_password_unescape,
+				  &acc->laddr.uri.password);
 		if (err)
 			goto out;
 	}
diff --git a/test/ua.c b/test/ua.c
index c2b0224..236a580 100644
--- a/test/ua.c
+++ b/test/ua.c
@@ -363,7 +363,7 @@ int test_ua_register_dns(void)
 
 
 #define USER   "alfredh"
-#define PASS   "password"
+#define PASS   "pass%40word"  /* NOTE: url-encoded */
 #define DOMAIN "localhost"
 
 static int reg_auth(enum sip_transp tp)
@@ -385,7 +385,7 @@ static int reg_auth(enum sip_transp tp)
 	TEST_ERR(err);
 
 	err = user_add(domain_lookup(t.srvv[0], DOMAIN)->ht_usr,
-		       "alfredh", "password", DOMAIN);
+		       "alfredh", "pass@word", DOMAIN);
 	TEST_ERR(err);
 
 	t.srvv[0]->auth_enabled = true;