From 197b8c52b74322cd2289fd365e4cb65074682870 Mon Sep 17 00:00:00 2001 From: Xavier Del Campo Romero Date: Thu, 9 Oct 2025 09:42:26 +0200 Subject: jwt.c: Use original base64 variant Otherwise, cookies set by previous, OpenSSL-based versions of slcl would be now invalidated because URL-safe base64 transforms some characters, thus breaking backwards compatiblity. For example, '/' is transformed into '_' on the example cookies below: - Original base64 encoding: a=eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJuYW1lIjogImEifQ==.jgp/SsraDR/3zlAnDLyj05VHulUNbDNHaPowvUkLto4= - URL-safe base64 encoding: a=eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJuYW1lIjogImEifQ==.jgp_SsraDR_3zlAnDLyj05VHulUNbDNHaPowvUkLto4= --- jwt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jwt.c b/jwt.c index fd5adb1..f00daf7 100644 --- a/jwt.c +++ b/jwt.c @@ -7,7 +7,7 @@ #include #include -#define VARIANT sodium_base64_VARIANT_URLSAFE +#define VARIANT sodium_base64_VARIANT_ORIGINAL static char *get_payload(const char *const name) { -- cgit v1.2.3