Skip to content

base64 encoded tokens (with padding) rejected #22

Closed

Description

@troystauffer

I have tokens that appear to have been generated using base64 encoding instead of base64url encoding (3rd party auth system) and line 8 of verify-stream.js defines the pattern which the token must match. That doesn't currently include '=' padding, which is causing these tokens to be rejected as invalid.

I'm reading through the spec, and while it's pretty clear that token issuers should not include padding, it also appears to recommend that validation should allow for padding.

Thoughts?

Activity

  1. troystauffer commented on Jun 24, 2015

    @troystauffer
    Author

    I created a PR for this: #25

  2. added 3 commits that reference this issue on Jul 19, 2015
    afa7e71
    1214947
    7907e02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions