fix(oauth2): unquote username and password for basic auth

lepture · Aug 24, 2024 · 63c9fb6 · 63c9fb6
1 parent 66d5b19
commit 63c9fb6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/authlib/oauth2/rfc6749/util.py b/authlib/oauth2/rfc6749/util.py
@@ -1,5 +1,6 @@
 import base64
 import binascii
+from urllib.parse import unquote
 from authlib.common.encoding import to_unicode
 
 
@@ -36,5 +37,5 @@ def extract_basic_authorization(headers):
         return None, None
     if ':' in query:
         username, password = query.split(':', 1)
-        return username, password
+        return unquote(username), unquote(password)
     return query, None