fix(dpop): htu without querystring

panva · Mar 4, 2022 · f6fa149 · f6fa149
1 parent 9cfd910
commit f6fa149
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/helpers/request.js b/lib/helpers/request.js
@@ -74,7 +74,7 @@ module.exports = async function request(options, { accessToken, mTLS = false, DP
     opts.headers = opts.headers || {};
     opts.headers.DPoP = await this.dpopProof(
       {
-        htu: url.href,
+        htu: `${url.origin}${url.pathname}`,
         htm: options.method,
         nonce: nonces.get(nonceKey),
       },