publicca: use RawURLEncoding instead of URLEncoding for unpadded base64 encoding (#15010) (#24283)

[upstream:d74edc196d16052716bebf3038fbe191c17a1d7b]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/15010.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+publicca: use `RawURLEncoding` instead of `URLEncoding` for unpadded base64 encoding
+```

google/services/publicca/resource_public_ca_external_account_key.go

@@ -191,12 +191,12 @@ func flattenPublicCAExternalAccountKeyB64urlMacKey(v interface{}, d *schema.Reso
 		return ""
 	}
 
-	dec, err := base64.StdEncoding.DecodeString(v.(string))
+	dec, err := base64.RawStdEncoding.DecodeString(v.(string))
 	if err != nil {
 		return ""
 	}
 
-	return base64.URLEncoding.EncodeToString(dec)
+	return base64.RawURLEncoding.EncodeToString(dec)
 }
 
 func resourcePublicCAExternalAccountKeyPostCreateSetComputedFields(d *schema.ResourceData, meta interface{}, res map[string]interface{}) error {

google/verify/validation.go

@@ -306,7 +306,7 @@ func ValidateBase64String(i interface{}, val string) ([]string, []error) {
 }
 
 func ValidateBase64URLString(i interface{}, val string) ([]string, []error) {
-	_, err := base64.URLEncoding.DecodeString(i.(string))
+	_, err := base64.RawURLEncoding.DecodeString(i.(string))
 	if err != nil {
 		return nil, []error{fmt.Errorf("could not decode %q as a valid base64URL value.", val)}
 	}