Merge pull request #697 from fkooman/fix-s256

Fix PKCE code verifier encoding to match specification
This commit is contained in:
Andrew Millington
2017-12-23 01:52:33 +00:00
committed by GitHub
2 changed files with 2 additions and 2 deletions

View File

@ -144,7 +144,7 @@ class AuthCodeGrant extends AbstractAuthorizeGrant
case 'S256':
if (
hash_equals(
urlencode(base64_encode(hash('sha256', $codeVerifier))),
strtr(rtrim(base64_encode(hash('sha256', $codeVerifier)), '='), '+/', '-_'),
$authCodePayload->code_challenge
) === false
) {