Merge pull request #1936 from braunsonm/pkce-code-verifier-correction
Remove unsupported special characters from the code verifier runes
commitddcc433a977b7446b4644e33927975a8f90fbdc2
authorJoel Speed <Joel.speed@hotmail.co.uk>
dateMon 19 Dec 2022, 10:01 (4 years ago)
parent0832488311d210
pkg/encryption/utils.go+1−1
@@ -17,7 +17,7 @@ import (
1717const (
1818 CodeChallengeMethodPlain = "plain"
1919 CodeChallengeMethodS256 = "S256"
20− asciiCharset = " !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~"
20+ asciiCharset = "-.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~"
2121)
2222
2323// SecretBytes attempts to base64 decode the secret, if that fails it treats the secret as binary