Merge pull request #231 from camunda/fix-230

fix(oauth): uri encode clientId and clientSecret
camunda · Aug 21, 2024 · 9a43a67 · 9a43a67
2 parents d1ec5b5 + dd8583a
commit 9a43a67
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/oauth/lib/OAuthProvider.ts b/src/oauth/lib/OAuthProvider.ts
@@ -281,7 +281,11 @@ export class OAuthProvider implements IOAuthProvider {
 	}) {
 		const body = `${this.addAudienceIfNeeded(
 			audienceType
-		)}client_id=${clientIdToUse}&client_secret=${clientSecretToUse}&grant_type=client_credentials`
+		)}client_id=${encodeURIComponent(
+			clientIdToUse
+		)}&client_secret=${encodeURIComponent(
+			clientSecretToUse
+		)}&grant_type=client_credentials`
 		/* Add a scope to the token request, if one is set */
 		const bodyWithScope = this.scope ? `${body}&scope=${this.scope}` : body