Externally created tokens were failing to vaildate, it turns out that…

… signatures were being double encoded. I used the debugger at jwt.io to confirm.
robbert229 · Feb 22, 2018 · 2479b53 · 2479b53
1 parent c702dd3
commit 2479b53
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/algorithms.go b/algorithms.go
@@ -41,13 +41,13 @@ func (a *Algorithm) write(data []byte) (int, error) {
 }
 
 // Sign signs the token with the given hash, and key
-func (a *Algorithm) Sign(unsignedToken string) (string, error) {
+func (a *Algorithm) Sign(unsignedToken string) ([]byte, error) {
 	_, err := a.write([]byte(unsignedToken))
 	if err != nil {
-		return "", errors.Wrap(err, "Unable to write to HMAC-SHA256")
+		return nil, errors.Wrap(err, "Unable to write to HMAC-SHA256")
 	}
 
-	encodedToken := base64.RawURLEncoding.EncodeToString(a.sum(nil))
+	encodedToken := a.sum(nil)
 	a.reset()
 
 	return encodedToken, nil