tokenSecret is encoded

jaredhanson · Nov 5, 2012 · 7309711 · 7309711
1 parent 76ec860
commit 7309711
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/passport-http-oauth/strategies/consumer.js b/lib/passport-http-oauth/strategies/consumer.js
@@ -290,7 +290,7 @@ ConsumerStrategy.prototype.authenticate = function(req) {
 
       if (signatureMethod == 'HMAC-SHA1') {
         var key = consumerSecret + '&';
-        if (tokenSecret) { key += tokenSecret; }
+        if (tokenSecret) { key += utils.encode(tokenSecret); }
         var computedSignature = utils.hmacsha1(key, base);
 
         if (signature !== computedSignature) {

diff --git a/lib/passport-http-oauth/strategies/token.js b/lib/passport-http-oauth/strategies/token.js
@@ -222,7 +222,7 @@ TokenStrategy.prototype.authenticate = function(req) {
 
       if (signatureMethod == 'HMAC-SHA1') {
         var key = consumerSecret + '&';
-        if (tokenSecret) { key += tokenSecret; }
+        if (tokenSecret) { key += utils.encode(tokenSecret); }
         var computedSignature = utils.hmacsha1(key, base);
 
         if (signature !== computedSignature) {