Merge pull request #697 from fkooman/fix-s256

Fix PKCE code verifier encoding to match specification
2025-05-31 14:12:07 +05:30 · 2017-12-23 01:52:33 +00:00
parent f5a1feb67d 6426e597a3
commit f11e4c81cd
2 changed files with 2 additions and 2 deletions
--- a/src/Grant/AuthCodeGrant.php
+++ b/src/Grant/AuthCodeGrant.php
@@ -144,7 +144,7 @@ class AuthCodeGrant extends AbstractAuthorizeGrant
                case 'S256':
                    if (
                        hash_equals(
-                            urlencode(base64_encode(hash('sha256', $codeVerifier))),
+                            strtr(rtrim(base64_encode(hash('sha256', $codeVerifier)), '='), '+/', '-_'),
                            $authCodePayload->code_challenge
                        ) === false
                    ) {