Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use sha256 for token generation #43

Merged
merged 1 commit into from
Oct 14, 2021
Merged

Conversation

jankapunkt
Copy link
Member

The implements #38 and replaces sha1 with sha256

I also had to update the assertion and all the tests checking for sha256 regex.

@jankapunkt jankapunkt added the security ❗ Address a security issue label Oct 14, 2021
@jankapunkt jankapunkt linked an issue Oct 14, 2021 that may be closed by this pull request
@HappyZombies
Copy link
Member

I am going to do a special kind of test to make sure this doesn't break an application I currently have.

@jankapunkt
Copy link
Member Author

@HappyZombies yes please do, I currently run it against or internal staging app environment to see if the change does raise any issues

@HappyZombies
Copy link
Member

@jankapunkt looks good, just (as expected) makes the auth code a longer string (and of course) is sha256 ;)

Copy link
Member

@HappyZombies HappyZombies left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Excellent!

@HappyZombies HappyZombies merged commit ff6a450 into development Oct 14, 2021
@HappyZombies HappyZombies deleted the fix-sha1-to-sha256 branch October 14, 2021 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security ❗ Address a security issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update crypto hash to use sha256
3 participants