Follow rfc 7515 and strip padding from JWS segments (#324)
* strip off illegal padding
* oops: remove unused import base64
diff --git a/google/auth/jwt.py b/google/auth/jwt.py
index 3805f37..bea70ad 100644
--- a/google/auth/jwt.py
+++ b/google/auth/jwt.py
@@ -40,7 +40,6 @@
"""
-import base64
import collections
import copy
import datetime
@@ -86,13 +85,19 @@
header['kid'] = key_id
segments = [
- base64.urlsafe_b64encode(json.dumps(header).encode('utf-8')),
- base64.urlsafe_b64encode(json.dumps(payload).encode('utf-8')),
+ _helpers.unpadded_urlsafe_b64encode(
+ json.dumps(header).encode('utf-8')
+ ),
+ _helpers.unpadded_urlsafe_b64encode(
+ json.dumps(payload).encode('utf-8')
+ ),
]
signing_input = b'.'.join(segments)
signature = signer.sign(signing_input)
- segments.append(base64.urlsafe_b64encode(signature))
+ segments.append(
+ _helpers.unpadded_urlsafe_b64encode(signature)
+ )
return b'.'.join(segments)