diff options
| author | Kagami Sascha Rosylight <saschanaz@outlook.com> | 2023-06-25 04:04:33 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-06-25 11:04:33 +0900 |
| commit | ef354e94f20ace67b94faa2859c458a436cdd3f7 (patch) | |
| tree | aa446426e7a7a74e77eb939850da134ae2bcdf3f /packages/backend/src/server/api/endpoints/i | |
| parent | chore(backend, misskey-js): add type for signup (#11043) (diff) | |
| download | misskey-ef354e94f20ace67b94faa2859c458a436cdd3f7.tar.gz misskey-ef354e94f20ace67b94faa2859c458a436cdd3f7.tar.bz2 misskey-ef354e94f20ace67b94faa2859c458a436cdd3f7.zip | |
refactor(backend): replace rndstr with secureRndstr (#11044)
* refactor(backend): replace rndstr with secureRndstr
* Update pnpm-lock.yaml
* .js
Diffstat (limited to 'packages/backend/src/server/api/endpoints/i')
| -rw-r--r-- | packages/backend/src/server/api/endpoints/i/update-email.ts | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/packages/backend/src/server/api/endpoints/i/update-email.ts b/packages/backend/src/server/api/endpoints/i/update-email.ts index 4f543a6472..58e056bd37 100644 --- a/packages/backend/src/server/api/endpoints/i/update-email.ts +++ b/packages/backend/src/server/api/endpoints/i/update-email.ts @@ -1,5 +1,4 @@ import { Inject, Injectable } from '@nestjs/common'; -import rndstr from 'rndstr'; import ms from 'ms'; import bcrypt from 'bcryptjs'; import { Endpoint } from '@/server/api/endpoint-base.js'; @@ -9,6 +8,7 @@ import { EmailService } from '@/core/EmailService.js'; import type { Config } from '@/config.js'; import { DI } from '@/di-symbols.js'; import { GlobalEventService } from '@/core/GlobalEventService.js'; +import { L_CHARS, secureRndstr } from '@/misc/secure-rndstr.js'; import { ApiError } from '../../error.js'; export const meta = { @@ -94,7 +94,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { this.globalEventService.publishMainStream(me.id, 'meUpdated', iObj); if (ps.email != null) { - const code = rndstr('a-z0-9', 16); + const code = secureRndstr(16, { chars: L_CHARS }); await this.userProfilesRepository.update(me.id, { emailVerifyCode: code, |