From 311d210ec4769e918ed7b556d7ac8e2d05295dc8 Mon Sep 17 00:00:00 2001 From: Braunson M <5280764+braunsonm@users.noreply.github.com> Date: Fri, 16 Dec 2022 19:57:02 -0500 Subject: [PATCH] Remove unsupported special characters from the code verifier runes - Not all special ASCII characters are strictly supported by the spec --- pkg/encryption/utils.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/encryption/utils.go b/pkg/encryption/utils.go index 6db1b453..aec52532 100644 --- a/pkg/encryption/utils.go +++ b/pkg/encryption/utils.go @@ -17,7 +17,7 @@ import ( const ( CodeChallengeMethodPlain = "plain" CodeChallengeMethodS256 = "S256" - asciiCharset = " !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~" + asciiCharset = "-.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~" ) // SecretBytes attempts to base64 decode the secret, if that fails it treats the secret as binary