Inklings-io / selfauth

self-hosted auth_endpoint using simple login mechanism
Creative Commons Zero v1.0 Universal
81 stars 15 forks source link

Use URL safe base64 encoding for scopes #40

Closed Zegnat closed 6 years ago

Zegnat commented 6 years ago

This is not an OAuth problem, but became a problem when one party encodes using a + for spaces, when another only decodes %20.

Thanks @skpy for being the first to report this issue in the wild. I should have just listened to @sebsel way back when. See #indieweb-dev for more info.

Closes #35.