Merge pull request bitly#561 from danopia/patch-1

Strip JWT base64 padding before parsing. bitly#560
samsarahq · Mar 25, 2018 · 1c1db88 · 1c1db88
2 parents ae78840 + 542ef54
commit 1c1db88
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/providers/google.go b/providers/google.go
@@ -67,7 +67,8 @@ func emailFromIdToken(idToken string) (string, error) {
 	// id_token is a base64 encode ID token payload
 	// https://developers.google.com/accounts/docs/OAuth2Login#obtainuserinfo
 	jwt := strings.Split(idToken, ".")
-	b, err := base64.RawURLEncoding.DecodeString(jwt[1])
+	jwtData := strings.TrimSuffix(jwt[1], "=")
+	b, err := base64.RawURLEncoding.DecodeString(jwtData)
 	if err != nil {
 		return "", err
 	}