Merge pull request #108 from kapawit/fix/pgpass-special-characters

FIX (postgresql): Escape special characters in .pgpass file for authentication

Author: RostislavDugin

backend/internal/features/backups/backups/usecases/postgresql/create_backup_uc.go

@@ -719,11 +719,18 @@ func (uc *CreatePostgresqlBackupUsecase) createTempPgpassFile(
 		return "", nil
 	}
 
+	// Escape special characters in password as per PostgreSQL .pgpass format
+	// Per official PostgreSQL documentation: only backslash and colon need escaping
+	escapedPassword := strings.NewReplacer(
+		"\\", "\\\\",
+		":", "\\:",
+	).Replace(password)
+
 	pgpassContent := fmt.Sprintf("%s:%d:*:%s:%s",
 		pgConfig.Host,
 		pgConfig.Port,
 		pgConfig.Username,
-		password,
+		escapedPassword,
 	)
 
 	tempDir, err := os.MkdirTemp("", "pgpass")

backend/internal/features/restores/usecases/postgresql/restore_backup_uc.go

@@ -564,11 +564,18 @@ func (uc *RestorePostgresqlBackupUsecase) createTempPgpassFile(
 		return "", nil
 	}
 
+	// Escape special characters in password as per PostgreSQL .pgpass format
+	// Per official PostgreSQL documentation: only backslash and colon need escaping
+	escapedPassword := strings.NewReplacer(
+		"\\", "\\\\",
+		":", "\\:",
+	).Replace(password)
+
 	pgpassContent := fmt.Sprintf("%s:%d:*:%s:%s",
 		pgConfig.Host,
 		pgConfig.Port,
 		pgConfig.Username,
-		password,
+		escapedPassword,
 	)
 
 	tempDir, err := os.MkdirTemp("", "pgpass")