git.iko.soy/typeable/oauth2-proxy
on master help sign in
Merge pull request #561 from danopia/patch-1

Strip JWT base64 padding before parsing. #560

commit1c1db881c321d34401190329671335080e8967a9 authorJehiah Czebotar <jehiah@gmail.com> dateSat 24 Mar 2018, 23:45 (9 years ago) parentae78840542ef54
1 file changed+2−1
providers/google.go+2−1
providers/google.go+2−1
@@ -67,7 +67,8 @@ func emailFromIdToken(idToken string) (string, error) {
6767 // id_token is a base64 encode ID token payload
6868 // https://developers.google.com/accounts/docs/OAuth2Login#obtainuserinfo
6969 jwt := strings.Split(idToken, ".")
70− b, err := base64.RawURLEncoding.DecodeString(jwt[1])
70+ jwtData := strings.TrimSuffix(jwt[1], "=")
71+ b, err := base64.RawURLEncoding.DecodeString(jwtData)
7172 if err != nil {
7273 return "", err
7374 }