awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 14:27:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix challenge match

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-11-07 09:19:45 -08:00
parent c2a3399291
commit 4b10b4ec33
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/pki-acme/pki-acme-challenge-service.ts
+1 -1
View File
@@ -66,7 +66,7 @@ export const pkiAcmeChallengeServiceFactory = ({
throw new BadRequestError({ message: "ACME challenge response is not 200" }); throw new BadRequestError({ message: "ACME challenge response is not 200" });
} }
const challengeResponseBody = await challengeResponse.text(); const challengeResponseBody = await challengeResponse.text();
const thumbprint = Buffer.from(challenge.auth.account.publicKeyThumbprint, "utf-8").toString("base64url"); const thumbprint = challenge.auth.account.publicKeyThumbprint;
const expectedChallengeResponseBody = `${challenge.auth.token}.${thumbprint}`; const expectedChallengeResponseBody = `${challenge.auth.token}.${thumbprint}`;
if (challengeResponseBody.trimEnd() !== expectedChallengeResponseBody) { if (challengeResponseBody.trimEnd() !== expectedChallengeResponseBody) {
throw new AcmeIncorrectResponseError({ message: "ACME challenge response is not correct" }); throw new AcmeIncorrectResponseError({ message: "ACME challenge response is not correct" });