From 02ea2388d67f7b3dee08d6a5b72fa4ca7bea3886 Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Fri, 11 Aug 2023 16:26:25 +0200 Subject: [PATCH] auth-node: avoid atob Signed-off-by: Patrik Oldsberg --- plugins/auth-node/src/passport/PassportHelpers.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/plugins/auth-node/src/passport/PassportHelpers.ts b/plugins/auth-node/src/passport/PassportHelpers.ts index d24163bf34..6c13523811 100644 --- a/plugins/auth-node/src/passport/PassportHelpers.ts +++ b/plugins/auth-node/src/passport/PassportHelpers.ts @@ -37,7 +37,10 @@ function decodeJwtPayload(token: string): Record { let payload: unknown; try { payload = JSON.parse( - atob(payloadStr.replace(/-/g, '+').replace(/_/g, '/')), + Buffer.from( + payloadStr.replace(/-/g, '+').replace(/_/g, '/'), + 'base64', + ).toString('utf8'), ); } catch (e) { throw new Error('Invalid JWT token');