git.iko.soy/typeable/oauth2-proxy
on master help sign in
Strip JWT base64 padding before parsing. #560
commit542ef540939cbea0e58f4744a0216b68c9579ff6 authorDaniel Lamando <me@danopia.net> dateThu 8 Mar 2018, 16:44 (9 years ago) parentae49c7d
1 file changed+2−1
providers/google.go+2−1
providers/google.go+2−1
@@ -67,7 +67,8 @@ func emailFromIdToken(idToken string) (string, error) {
6767 // id_token is a base64 encode ID token payload
6868 // https://developers.google.com/accounts/docs/OAuth2Login#obtainuserinfo
6969 jwt := strings.Split(idToken, ".")
70− b, err := base64.RawURLEncoding.DecodeString(jwt[1])
70+ jwtData := strings.TrimSuffix(jwt[1], "=")
71+ b, err := base64.RawURLEncoding.DecodeString(jwtData)
7172 if err != nil {
7273 return "", err
7374 }