From 3896af2a43b6bce212e8fc8c964bd0c4d2603106 Mon Sep 17 00:00:00 2001 From: Jaco Bezuidenhout Date: Wed, 27 May 2026 13:14:07 +0000 Subject: [PATCH] fix: _pad() wrong for reject tokens (6-char purpose) 4 - len(s) % 4 = 4 when len % 4 == 0, adding 4 padding chars instead of 0. -len(s) % 4 correctly returns 0 in that case. --- app/approval.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/approval.py b/app/approval.py index 92b5c1d..ab64729 100644 --- a/app/approval.py +++ b/app/approval.py @@ -57,7 +57,7 @@ def generate_token(action_id: str, purpose: str) -> str: def _pad(s: str) -> str: - return s + "=" * (4 - len(s) % 4) + return s + "=" * (-len(s) % 4) # 0 when already aligned, not 4 def verify_token(token: str) -> tuple[str, str]: