generateCodeVerifier creates a cryptographically random string of 128 characters using URL-safe base64 encoding
()
| 37 | // generateCodeVerifier creates a cryptographically random string |
| 38 | // of 128 characters using URL-safe base64 encoding |
| 39 | func generateCodeVerifier() (string, error) { |
| 40 | // Generate 96 random bytes (will result in 128 base64 characters) |
| 41 | bytes := make([]byte, 96) |
| 42 | _, err := rand.Read(bytes) |
| 43 | if err != nil { |
| 44 | return "", fmt.Errorf("failed to generate random bytes: %w", err) |
| 45 | } |
| 46 | |
| 47 | // Encode to URL-safe base64 without padding |
| 48 | return base64.URLEncoding.WithPadding(base64.NoPadding).EncodeToString(bytes), nil |
| 49 | } |
| 50 | |
| 51 | // generateCodeChallenge creates a SHA256 hash of the code verifier |
| 52 | // and encodes it using URL-safe base64 encoding without padding |
no test coverage detected