Remove CSRF token generation from Security Component.

This is now handled by the CSRF Component and doesn't need to be duplicated here.
cakephp · Nov 8, 2013 · 70bbb02 · 70bbb02
1 parent a6ef60f
commit 70bbb02
Show file tree

Hide file tree

Showing 2 changed files with 32 additions and 80 deletions.
diff --git a/Cake/Controller/Component/SecurityComponent.php b/Cake/Controller/Component/SecurityComponent.php
@@ -371,9 +371,7 @@ public function generateToken(Request $request) {
 			}
 			return false;
 		}
-		$authKey = Security::generateAuthKey();
 		$token = array(
-			'key' => $authKey,
 			'allowedControllers' => $this->allowedControllers,
 			'allowedActions' => $this->allowedActions,
 			'unlockedFields' => $this->unlockedFields,
@@ -385,7 +383,6 @@ public function generateToken(Request $request) {
 		}
 		$this->Session->write('_Token', $token);
 		$request->params['_Token'] = array(
-			'key' => $token['key'],
 			'unlockedFields' => $token['unlockedFields']
 		);
 		return true;