Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove padding on generated base64url encoded strings #3204

Open
swcurran opened this issue Aug 28, 2024 · 0 comments
Open

Remove padding on generated base64url encoded strings #3204

swcurran opened this issue Aug 28, 2024 · 0 comments

Comments

@swcurran
Copy link
Member

The guidance in Aries RFCs is that when base64url encoding is used, the = padding SHOULD be removed by the sender, and the recipient MUST handle receiving both padded and unpadded base64url encodings. The latter is a defensive approach in case the sender doesn’t follow the rules. The need to remove the padding is exacerbated in the OOB handling because the encoding string is used as a HTTP URL argument and the use of = as a padding character must also be percent-encoded as the character is special in URLs.

This was raised in an Aries RFCs Issue that was discussed at an Aries Working Group meeting and merged.

This issue is to update ACA-Py to strip the = padding from the OOB base64url encoded string. Ideally, this will be done in as general a way as possible in ACA-Py, so that the same behavior is applied across the project. If an “across the board” change is too difficult to achieve, we can leave that for later — addressing just the immediate issue in this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant