`generateUrl` encodes spaces as `+` but should use `%20`

coldbox-modules / totp

A CFML Implementation of Time-based One-time Passwords

MIT License

14 stars 6 forks source link

`generateUrl` encodes spaces as `+` but should use `%20` #6

Closed davidAtInleague closed 1 year ago

davidAtInleague commented 1 year ago

Lucee5
TOTP v 1.0.8

Generating a TOTP secret with an issuer containing whitespace in it encodes the whitespace using + instead of %20, which then decodes incorrectly in Google Authenticator. Looks like this is the default behavior of encodeForURL on Lucee.

elpete commented 1 year ago

Fixed in v1.0.9