Update fxa/oauth.py

Thank you for for this hint, I was just used to odd numbers :-) Co-Authored-By: Rémy HUBSCHER <hubscher.remy@gmail.com>
mozilla · Apr 28, 2020 · 8906e52 · 8906e52
1 parent 987a836
commit 8906e52
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/fxa/oauth.py b/fxa/oauth.py
@@ -152,7 +152,7 @@ def authorize_code(self, sessionOrAssertion, scope=None, client_id=None,
         # Although not relevant in this scenario from a security perspective,
         # we generate a random 'state' and check the returned redirect URL
         # for completeness.
-        state = base64.urlsafe_b64encode(os.urandom(23)).decode('utf-8').rstrip("=")
+        state = base64.urlsafe_b64encode(os.urandom(24)).decode('utf-8')
 
         body = {
             "client_id": client_id,