+1 -1

atproto/auth/oauth/oauth.go

reviewed

··· 283 283 pkceVerifier := fmt.Sprintf("%s%s%s", randomNonce(), randomNonce(), randomNonce()) 284 284 285 285 // generate PKCE code challenge for use in PAR request 286 286 - codeChallenge := S256CodeChallenge(pkceVerifier) 286 286 + codeChallenge := s256CodeChallenge(pkceVerifier) 287 287 288 288 slog.Debug("preparing PAR", "client_id", app.Config.ClientID, "callback_url", app.Config.CallbackURL) 289 289 body := PushedAuthRequest{

+1 -1

atproto/auth/oauth/session.go

reviewed

··· 182 182 sess.lk.RLock() 183 183 defer sess.lk.RUnlock() 184 184 185 185 - ath := S256CodeChallenge(sess.Data.AccessToken) 185 185 + ath := s256CodeChallenge(sess.Data.AccessToken) 186 186 claims := dpopClaims{ 187 187 HTTPMethod: method, 188 188 TargetURI: reqURL,

+1 -1

atproto/auth/oauth/util.go

reviewed

··· 14 14 return base64.RawURLEncoding.EncodeToString(buf) 15 15 } 16 16 17 17 - func S256CodeChallenge(raw string) string { 17 17 + func s256CodeChallenge(raw string) string { 18 18 b := sha256.Sum256([]byte(raw)) 19 19 return base64.RawURLEncoding.EncodeToString(b[:]) 20 20 }