github-mirror/discourse
github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-03-27 03:17:24 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FEATURE: change SSO to use sha256 HMAC, which is more secure

Browse Source
This commit is contained in:
Sam 2014-02-26 09:44:41 +11:00
parent 8cbff3672f
commit 890d06ac04
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/single_sign_on.rb
View File

@ -43,7 +43,7 @@ class SingleSignOn
end
def sign(payload)
Digest::SHA2.hexdigest(payload + sso_secret)
OpenSSL::HMAC.hexdigest("sha256", sso_secret, payload)
end