the replace function will only replace the first instance of the + an…

…d / characters resulting in some strings that still contain those characters. Altering the string format to base64url will handle everything for url safety automatically. (#31)

#28

src/util.ts

@@ -6,7 +6,7 @@
 import { randomBytes } from 'crypto';
 
 function bytesToBase64url(s: Buffer): string {
-  return s.toString('base64').replace('+', '-').replace('/', '_');
+  return s.toString('base64url');
 }
 
 export const generateRandomString = (length: number): string => {