diff options
| author | MeiMei <30769358+mei23@users.noreply.github.com> | 2020-03-29 23:16:36 +0900 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-03-29 23:16:36 +0900 |
| commit | 244ef0cb8f82b18c22990ece728f2e1fe8398a62 (patch) | |
| tree | 781b5820207bf78d831f13928d5b5253582436b0 /src/server/api/endpoints/miauth | |
| parent | 12.28.0 (diff) | |
| download | sharkey-244ef0cb8f82b18c22990ece728f2e1fe8398a62.tar.gz sharkey-244ef0cb8f82b18c22990ece728f2e1fe8398a62.tar.bz2 sharkey-244ef0cb8f82b18c22990ece728f2e1fe8398a62.zip | |
トークン系の乱数ソースではcryptoを使うように (#6200)
Diffstat (limited to 'src/server/api/endpoints/miauth')
| -rw-r--r-- | src/server/api/endpoints/miauth/gen-token.ts | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/server/api/endpoints/miauth/gen-token.ts b/src/server/api/endpoints/miauth/gen-token.ts index efa8680805..d8c74ec8d7 100644 --- a/src/server/api/endpoints/miauth/gen-token.ts +++ b/src/server/api/endpoints/miauth/gen-token.ts @@ -1,8 +1,8 @@ -import rndstr from 'rndstr'; import $ from 'cafy'; import define from '../../define'; import { AccessTokens } from '../../../../models'; import { genId } from '../../../../misc/gen-id'; +import { secureRndstr } from '../../../../misc/secure-rndstr'; export const meta = { tags: ['auth'], @@ -36,7 +36,7 @@ export const meta = { export default define(meta, async (ps, user) => { // Generate access token - const accessToken = rndstr('a-zA-Z0-9', 32); + const accessToken = secureRndstr(32, true); // Insert access token doc await AccessTokens.save({ |