Merge pull request #305 from torusresearch/fix/btoa

use safebtoa instead of btoa
torusresearch · Sep 22, 2023 · 80ea062 · 80ea062
2 parents 14a5a90 + 007f70b
commit 80ea062
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 1 deletion.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -39,6 +39,7 @@
     "@toruslabs/http-helpers": "^5.0.0",
     "@toruslabs/metadata-helpers": "^5.0.0",
     "@toruslabs/torus.js": "^11.0.5",
+    "base64url": "^3.0.1",
     "bowser": "^2.11.0",
     "events": "^3.3.0",
     "jwt-decode": "^3.1.2",

diff --git a/src/handlers/AbstractLoginHandler.ts b/src/handlers/AbstractLoginHandler.ts
@@ -1,4 +1,5 @@
 import { BroadcastChannel } from "@toruslabs/broadcast-channel";
+import base64url from "base64url";
 
 import { LOGIN_TYPE, UX_MODE, UX_MODE_TYPE } from "../utils/enums";
 import { broadcastChannelOptions, getTimeout, randomId } from "../utils/helpers";
@@ -26,7 +27,7 @@ abstract class AbstractLoginHandler implements ILoginHandler {
 
   get state(): string {
     return encodeURIComponent(
-      window.btoa(
+      base64url.encode(
         JSON.stringify({
           ...(this.customState || {}),
           instanceId: this.nonce,