From fabec2c89b913c89e32755bdaeb9ecd11034c8e2 Mon Sep 17 00:00:00 2001
From: Wyatt Johnson <wyattjoh@gmail.com>
Date: Fri, 19 Oct 2018 16:28:13 +0000
Subject: [PATCH] review: fix invalid substring

---
 services/jwt.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/jwt.js b/services/jwt.js
index 21045da8f..b1e444dbd 100644
--- a/services/jwt.js
+++ b/services/jwt.js
@@ -122,7 +122,7 @@ function SharedSecret({ kid = undefined, secret = null }, algorithm) {
 
   // If the secret is base64 encoded, then decode it!
   if (secret.startsWith('base64:')) {
-    secret = Buffer.from(secret.substring(6), 'base64').toString();
+    secret = Buffer.from(secret.substring(7), 'base64').toString();
   }
 
   return new Secret({