[Bug 133340] Incorrect storage of authenticated stream URLS

[m4dm4n]

Public bug reported:

Binary package hint: amarok

When adding streams which employ HTTP authentication via a
username/password included in the URL in the format
http://username:password@somewebsite.com, Amarok will successfully play
them until  either the program is exited or another playlist is loaded.
After this happens, if the stream is played again, it will present an
error saying no suitable decoder could be found. If the stream entry is
then edited it shows that there is no longer a password present, only a
username. If the password is re-added and the entry is saved and played
it works again. I believe the error is due to an authentication failure
since the password is missing.

I have tracked down the issue which I believe to be caused by a call to KURL::prettyURL() in StreamEntry::xml() through: url.appendChild( doc.createTextNode( m_url.prettyURL() )) in playlistbrowseritem.cpp on line 1197 (1.4.6)
Note that in the kdecore documentation it states that KURL::prettyURL will remove the password entry from the URL, since it is being formatted for display purposes. As a result the stream entry is saved to the stream database without a password present in the URL.

The issue presented in 1.4.6, although it may have existed before then.
This functionality may or may not be intentional, however in the case
that it is intentional I don't believe it is clear enough to the user
that they will need to re-add the password to resolve the problem.

** Affects: amarok (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Incorrect storage of authenticated stream URLS 
https://bugs.launchpad.net/bugs/133340
You received this bug notification because you are a member of Kubuntu
Team, which is a bug contact for amarok in ubuntu.