Action fails to log in to spacedock if the password contains a `$`

[Phantomical]

The action uses double quotes when pasting in the password at here. This means that sequences such as $$ or anything that looks like a variable name will get replaced.

[Tempus-superest]

Just to add another data point from our side: in our case the issue wasn’t just quoting around URI-encoding — it was the URI-encoding itself.

SpaceDock /api/login expects literal multipart form fields. Encoding the password (even when correctly quoted) caused valid credentials to be rejected as “incorrect”.

What finally worked for us in CI was:
curl --form-string "username=$USERNAME" \ --form-string "password=$PASSWORD" \ https://spacedock.info/api/login

Do not URI-encode the password for /api/login
Use --form-string so secrets are sent literally (and to avoid -F treating @ as file syntax)

Local curl with raw -F succeeds, and matching that behavior in the action resolved auth failures for passwords containing * and other metacharacters.

Hope that helps clarify the root cause for anyone else hitting this.