use RawURLEncoding, it is the unpadded version

hotsock · Aug 31, 2024 · c573022 · c573022
1 parent e15f296
commit c573022
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/issuer/kms.go b/internal/issuer/kms.go
@@ -56,7 +56,7 @@ func SignJWTWithKMS(ctx context.Context, kmsClient KMSAPI, token *jwt.Token, kms
 	fullSignature = append(fullSignature, esig.R.Bytes()...)
 	fullSignature = append(fullSignature, esig.S.Bytes()...)
 
-	sig := strings.TrimRight(base64.URLEncoding.EncodeToString(fullSignature), "=")
+	sig := base64.RawURLEncoding.EncodeToString(fullSignature)
 
 	return strings.Join([]string{sstr, sig}, "."), nil
 }