MAGLaboratory / website

0 stars 1 forks source link

HMAC authentication does not use the binary representation of the base64 stream #15

Open blu006 opened 4 years ago

blu006 commented 4 years ago

The HMAC used in the PHP code and in the reporter do not decode the base64 representation of the included secret stream and treat it as if it is decoded into binary already.

This causes odd behavior such as the requirement for adding a newline at the reporter level in order to generate matching hmac keys.