トークン系の乱数ソースではcryptoを使うように (#6200)

This commit is contained in:
MeiMei
2020-03-29 23:16:36 +09:00
committed by GitHub
parent e2183400e5
commit 244ef0cb8f
5 changed files with 29 additions and 8 deletions

View File

@@ -1,8 +1,8 @@
import rndstr from 'rndstr';
import $ from 'cafy';
import define from '../../define';
import { AccessTokens } from '../../../../models';
import { genId } from '../../../../misc/gen-id';
import { secureRndstr } from '../../../../misc/secure-rndstr';
export const meta = {
tags: ['auth'],
@@ -36,7 +36,7 @@ export const meta = {
export default define(meta, async (ps, user) => {
// Generate access token
const accessToken = rndstr('a-zA-Z0-9', 32);
const accessToken = secureRndstr(32, true);
// Insert access token doc
await AccessTokens.save({