- changed status to resolved
HTTPRequest uses system default encoding
Issue #216
resolved
HTTPRequest.send creates an InputStreamReader without specifying an Charset, causing it to use system default encoding. This is in violation with the OAuth 2 and OIDC specifications, as these require UTF-8. These problems are most likely to manifest itself on the userinfo endpoint.
DefaultResourceRetriever also creates an InputStreamReader using the system default.
Comments (1)
-
- Log in to comment
Thanks Emond!
UTF-8 is now explicitly set, see commit f518b19.
The fix will go out as v5.27.1 in a few minutes.