Pass key_len to generate_key()

This is the correct usage of generate_key regardless of Ruby version
projectblacklight · Jan 22, 2024 · dedd954 · dedd954
1 parent 7ff508d
commit dedd954
Showing 1 changed file with 2 additions and 7 deletions.
diff --git a/app/controllers/concerns/blacklight/token_based_user.rb b/app/controllers/concerns/blacklight/token_based_user.rb
@@ -45,7 +45,7 @@ def encrypt_user_id(user_id, current_time = nil)
   end
 
   def export_secret_token
-    secret_key_generator.generate_key('encrypted user session key')[0..(key_len - 1)]
+    secret_key_generator.generate_key('encrypted user session key', key_len)
   end
 
   def secret_key_generator
@@ -56,12 +56,7 @@ def message_encryptor
     ActiveSupport::MessageEncryptor.new(export_secret_token)
   end
 
-  # Ruby 2.4 requires keys of very particular lengths
   def key_len
-    if ActiveSupport::MessageEncryptor.respond_to? :key_len
-      ActiveSupport::MessageEncryptor.key_len
-    else
-      0
-    end
+    ActiveSupport::MessageEncryptor.key_len
   end
 end