Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

FEATURE: change SSO to use sha256 HMAC, which is more secure

This commit is contained in:
Sam 2014-02-26 09:44:41 +11:00
parent 8cbff3672f
commit 890d06ac04
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/single_sign_on.rb
View File

@ -43,7 +43,7 @@ class SingleSignOn
end end
def sign(payload) def sign(payload)
Digest::SHA2.hexdigest(payload + sso_secret) OpenSSL::HMAC.hexdigest("sha256", sso_secret, payload)
end end