odata Basic Auth: Problem with special characters in password (base64 decoding)

[gregorw]

Dear community,
i recently stumbled over a problem with the odata basic authentication handling in SAP.
I used Postman to execute a simple Get-Request to a (german) SAP-System, for example
https://<my_server>.de/sap/opu/odata/TEST/SystemSet$format=json
For Authorization i used "Basic Auth" and entered my SAP Username and Password.

Postman automatically generates the Authorization-Header entry for the odata-Request by encoding <Username>:<Password> into base64.
As long as my password doesn't contain any special characters, everything is fine. However if the password contains special characters like the german 'ß', 'ö', 'ä' the request always ends with 401 Unauthorized.

I found out that Postman uses UTF-8 for base64 encoding as Destination Character Set. However the SAP system, on the other hand, uses ISO-8859-1 (Latin-1) for decoding the base64 Authorization-String which leads to the 401 error.

I believe the codepage used for decoding is something related to the SAP System settings itself.
Does anybody know where the SAP-Gateway determines the character set for decoding the Base64 authorization strings?

The question is similar to this topic which was not answered unfortunately.

Thanks in advance and best regards
George

[gregorw]

Hi George,

have you found a note related to this issue? Today I've faced the same issue. My password contained § and worked fine for SAP GUI and Form Based authentication. But as soon as I tried basic authentication it failed. Only after I used # instead it worked.

Best Regards
Gregor

[gregorw]

I think I found the SAP Note that describes this issue: 1240796 - HTTP logon with Basic Authorization or special character