[BUG] Unable to generate report if username contains |

[rupal-bq]

What is the bug?
Generating report with username containing | fails with

Error generating report.

Insufficient permissions. Reach out to your OpenSearch Dashboards administrator.

How can one reproduce the bug?
Steps to reproduce the behavior:

1. Create a username which contains |
2. Try downloading any report

What is the expected behavior?
Report should be downloaded

Do you have any additional context?
Username is parsed in https://github.com/opensearch-project/common-utils/blob/main/src/main/java/org/opensearch/commons/authuser/User.java#L160 where User String format must be pipe separated as : user_name|backendrole1,backendrole2|roles1,role2

[joshuali925]

similar issue opensearch-project/reporting#1045

[hasanaltinkaynak]

hi, we are planning to upgrade our domains. is the issue fixed with the version 2.17? Thanks

[cwperks]

hi, we are planning to upgrade our domains. is the issue fixed with the version 2.17? Thanks

I think the fix for this would need to be in the security plugin: opensearch-project/security#2756 (comment)

^ | is a special character and should not be used in usernames, but for SSO flows like OIDC where the subject cannot be controlled it should be possible to escape pipes behind the scenes.