properly sign when payload includes ' or *

aarsilv · Feb 7, 2014 · 432dc31 · 432dc31
1 parent 3a4f1fe
commit 432dc31
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/panda/api_authentication.js b/lib/panda/api_authentication.js
@@ -13,7 +13,12 @@ function canonicalString(params){
   index.sort();
 
   index.forEach(function(key) {
-    index2.push(key + "=" + encodeURIComponent(params[key]).replace(/\(/g, "%28").replace(/\)/g, "%29").replace(/!/g, "%21"))
+    index2.push(key + "=" + encodeURIComponent(params[key])
+                            .replace(/\(/g, "%28")
+                            .replace(/\)/g, "%29")
+                            .replace(/!/g, "%21")
+                            .replace(/'/g, "%27")
+                            .replace(/\*/g, "%2A"))
   });
 
   return index2.join("&");