Skip to content

Commit 07552bc

Browse files
committed
fix: use url safe code verifier
1 parent 0787a3b commit 07552bc

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

server/handlers/token.go

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,9 @@ func TokenHandler() gin.HandlerFunc {
5454

5555
hash := sha256.New()
5656
hash.Write([]byte(codeVerifier))
57-
encryptedCode := strings.TrimSuffix(base64.URLEncoding.EncodeToString(hash.Sum(nil)), "=")
57+
encryptedCode := strings.ReplaceAll(base64.URLEncoding.EncodeToString(hash.Sum(nil)), "+", "-")
58+
encryptedCode = strings.ReplaceAll(encryptedCode, "/", "_")
59+
encryptedCode = strings.ReplaceAll(encryptedCode, "=", "")
5860
sessionData := sessionstore.GetState(encryptedCode)
5961
if sessionData == "" {
6062
gc.JSON(http.StatusBadRequest, gin.H{

0 commit comments

Comments
 (0)