Skip to content

Comments

Update random passwords#99

Merged
asfgit merged 1 commit intoapache:masterfrom
drigodwin:fix-random-password
Apr 14, 2017
Merged

Update random passwords#99
asfgit merged 1 commit intoapache:masterfrom
drigodwin:fix-random-password

Conversation

@drigodwin
Copy link
Member

Strings.makeRandomId uses a insecure random so we shouldn't be using it for passwords, I've swapped it to Identifiers.makeRandomPassword which does use secure random.

@bostko
Copy link
Contributor

bostko commented Apr 13, 2017

LGTM!

Copy link
Member

@tbouron tbouron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Make sense, to use Identifiers.makeRandomPassword() instead of Identifiers.makeRandomId() to generate passwords.

Since it's pretty covered by unit testing, LGTM

@asfgit asfgit merged commit cb237cd into apache:master Apr 14, 2017
asfgit pushed a commit that referenced this pull request Apr 14, 2017
@drigodwin drigodwin deleted the fix-random-password branch April 14, 2017 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants