nickheppleston / nonce-util Goto Github PK

Tried to use in my system, worked fine, deployed to the server and failed.
Because the server has default locale with , as decimal separator, and thus
timeoutSeconds.ToString()
generates a nonce like
G04VWkOaEeRvjbO,1583153105,07135,54dKTSX6mBUuFodgdYM/oQD2DHF1SNJWG1+e9wtBdfA=
and validation with
var nonceArray = nonce.Split(',');
fails because finds too many parts.

Suggestion:
use locale-neutral timeoutSeconds.ToString(CultureInfo.InvariantCulture) everywhere to leave . in place and avoid breaking the nonce parser. Or get rid of the milliseconds entirely when creating the nonce.