User is trying to invoke REST API in MOVEit Automation using a PowerShell Script.

Received error : Bad request

Using Swagger UI, able to connect to MIA.

URL encoding is not performed for the password while making the call to REST API.

There should be no problem using special characters in the passwords. But for MOVEit Automation to receive the password correctly, its needed to URL encode it.

To show the proof, what we sent is the CMD window, and the code above is what the web-server (MIA) gets in a REST API call (without URL encoding)

There is actually no problem in using passwords with special characters but without URL encoding it wont work and user would see the error "Bad Request" or "Invalid username/password or not allowed to sign on from this location"

Example: If the password is not encoded and contains an ampersand, the web server will interpret that as being the end of the information.
As you can see above with URL encoding A1s&2d3f4 converts to A1s%262d3f4 where %26 is equal to &.
This happens with any special characters.

Passwords without special characters are of no issue.

Sample PS script that could be used to invoke REST API using PowerShell in MIA server.

# Get Access Token
$headers = @{
    "accept" = "application/json"
}

$password = '<password with special chars>'
echo "Password is $($password)"
$encodedPassword = [System.Uri]::EscapeDataString($password)
echo "Encoded Password is $($encodedPassword)"

$resp = Invoke-RestMethod -URI "http://localhost:8080/api/v1/token" -Method POST -Headers $headers -ContentType "application/x-www-form-urlencoded" -Body "grant_type=password&username=<username>&password=$encodedPassword"

echo "Access token is $($resp.access_token)"
echo "Expires in $($resp.expires_in) seconds"
echo "Refresh token is $($resp.refresh_token)"
echo "Token type is $($resp.token_type)"

Not Applicable.

 

Passwords with Special character required URL encoding for MIA to accept while making the REST API call using PowerShell.

A feature request can be submitted for the same.