How to enable usernames containing "/" and "\" characters in YPS and User Management APIs

Avoid the change unless really required. In majority of use cases it provides zero benefit.

Security warning

Enabling this setting can be potential security risk - taken from Tomcat decumentation:
The org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH and org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH system properties allow non-standard parsing of the request URI. Using these options when behind a reverse proxy may enable an attacker to bypass any security constraints enforced by the proxy.

  1. Log in to server where YSoft Payment System is installed

  2. Go to the location where YSoft Payment tomcat configuration is -<YPS install folder>\conf

  3. add following lines to the catalina.properties file

    org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH=true

  4. restart YSoft SafeQ Payment System service


Requests with properly encoded "\" (%5C) and "/" (%2F) characters should be available now, example:

/user-management/api/v1/user/test%5Cuser