diff options
| author | MeiMei <30769358+mei23@users.noreply.github.com> | 2020-03-29 23:16:36 +0900 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-03-29 23:16:36 +0900 |
| commit | 244ef0cb8f82b18c22990ece728f2e1fe8398a62 (patch) | |
| tree | 781b5820207bf78d831f13928d5b5253582436b0 /src/server/api/endpoints/app/create.ts | |
| parent | 12.28.0 (diff) | |
| download | sharkey-244ef0cb8f82b18c22990ece728f2e1fe8398a62.tar.gz sharkey-244ef0cb8f82b18c22990ece728f2e1fe8398a62.tar.bz2 sharkey-244ef0cb8f82b18c22990ece728f2e1fe8398a62.zip | |
トークン系の乱数ソースではcryptoを使うように (#6200)
Diffstat (limited to 'src/server/api/endpoints/app/create.ts')
| -rw-r--r-- | src/server/api/endpoints/app/create.ts | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/server/api/endpoints/app/create.ts b/src/server/api/endpoints/app/create.ts index ac3e8a18d2..776865ffb6 100644 --- a/src/server/api/endpoints/app/create.ts +++ b/src/server/api/endpoints/app/create.ts @@ -1,9 +1,9 @@ -import rndstr from 'rndstr'; import $ from 'cafy'; import define from '../../define'; import { Apps } from '../../../../models'; import { genId } from '../../../../misc/gen-id'; import { unique } from '../../../../prelude/array'; +import { secureRndstr } from '../../../../misc/secure-rndstr'; export const meta = { tags: ['app'], @@ -60,7 +60,7 @@ export const meta = { export default define(meta, async (ps, user) => { // Generate secret - const secret = rndstr('a-zA-Z0-9', 32); + const secret = secureRndstr(32, true); // for backward compatibility const permission = unique(ps.permission.map(v => v.replace(/^(.+)(\/|-)(read|write)$/, '$3:$1'))); |