devstack/authorizer
4
0
Fork 0
Code Pull Requests Actions Activity

fix: use url safe code verifier

Browse Source
This commit is contained in:
Lakhan Samani 2022-03-05 13:50:59 +05:30
parent 0787a3b494
commit 07552bc0b1
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server/handlers/token.go
View File

@ -54,7 +54,9 @@ func TokenHandler() gin.HandlerFunc {
hash := sha256.New() hash := sha256.New()
hash.Write([]byte(codeVerifier)) hash.Write([]byte(codeVerifier))
encryptedCode := strings.TrimSuffix(base64.URLEncoding.EncodeToString(hash.Sum(nil)), "=") encryptedCode := strings.ReplaceAll(base64.URLEncoding.EncodeToString(hash.Sum(nil)), "+", "-")
encryptedCode = strings.ReplaceAll(encryptedCode, "/", "_")
encryptedCode = strings.ReplaceAll(encryptedCode, "=", "")
sessionData := sessionstore.GetState(encryptedCode) sessionData := sessionstore.GetState(encryptedCode)
if sessionData == "" { if sessionData == "" {
gc.JSON(http.StatusBadRequest, gin.H{ gc.JSON(http.StatusBadRequest, gin.H{