diff options
| author | lambda <pleromagit@rogerbraun.net> | 2019-02-15 14:58:13 +0000 |
|---|---|---|
| committer | lambda <pleromagit@rogerbraun.net> | 2019-02-15 14:58:13 +0000 |
| commit | 1ce1b7b58dc0e009635c9dd6e2571df56c04f356 (patch) | |
| tree | 477fc43ca2dd22ea19edc28c596f8e8d685c9103 /lib/pleroma/web/oauth/app.ex | |
| parent | 921571c19bf4a7fcea666aa70744a02fe108d11a (diff) | |
| parent | e9ef4b8da627e516d5f1a2b742c6dafa65232098 (diff) | |
| download | pleroma-1ce1b7b58dc0e009635c9dd6e2571df56c04f356.tar.gz | |
Merge branch 'bugfix/oauth-token-padding' into 'develop'
oauth: never use base64 padding when returning tokens to applications
See merge request pleroma/pleroma!825
Diffstat (limited to 'lib/pleroma/web/oauth/app.ex')
| -rw-r--r-- | lib/pleroma/web/oauth/app.ex | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/lib/pleroma/web/oauth/app.ex b/lib/pleroma/web/oauth/app.ex index 3e8acde31..8b61bf3a4 100644 --- a/lib/pleroma/web/oauth/app.ex +++ b/lib/pleroma/web/oauth/app.ex @@ -25,8 +25,14 @@ defmodule Pleroma.Web.OAuth.App do if changeset.valid? do changeset - |> put_change(:client_id, :crypto.strong_rand_bytes(32) |> Base.url_encode64()) - |> put_change(:client_secret, :crypto.strong_rand_bytes(32) |> Base.url_encode64()) + |> put_change( + :client_id, + :crypto.strong_rand_bytes(32) |> Base.url_encode64(padding: false) + ) + |> put_change( + :client_secret, + :crypto.strong_rand_bytes(32) |> Base.url_encode64(padding: false) + ) else changeset end |