Skip to content

2.0.0

Compare
Choose a tag to compare
@codingjoe codingjoe released this 01 Jul 12:19

Switch token separate from / (slash) to URL safe character . (dot)

Some email clients replace double slashes with a single slash.
The double slash occurred for users with no last_login date (newly
created users).

To bypass this issue, the separator is changed to . (dot) as it is
a non-reserved URL safe character (RFC3986 2.3) and not part of the
base64url alphabet.

See also:
https://www.ietf.org/rfc/rfc3986.txt
https://tools.ietf.org/html/rfc4648