Merge pull request #1936 from braunsonm/pkce-code-verifier-correction

Remove unsupported special characters from the code verifier runes
2022-12-19 10:01:39 +00:00 · 2022-12-19 10:01:39 +00:00 · ddcc433a97
parent 0832488af3 311d210ec4
commit ddcc433a97
1 changed files with 1 additions and 1 deletions
--- a/pkg/encryption/utils.go
+++ b/pkg/encryption/utils.go
@ -17,7 +17,7 @@ import (
 const (
 	CodeChallengeMethodPlain = "plain"
 	CodeChallengeMethodS256  = "S256"
-	asciiCharset             = " !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~"
+	asciiCharset             = "-.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~"
 )

 // SecretBytes attempts to base64 decode the secret, if that fails it treats the secret as binary