github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-01-10 23:50:57 +00:00
Code Issues Projects Releases Packages Wiki Activity

private: fixed token generation bugs

Browse source 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
This commit is contained in:
Philip Molares 2021-01-17 19:52:08 +01:00
parent 0bd7a8f4bc
commit 0a1c3426c0
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
src/users/users.service.ts
View file

@ -39,19 +39,24 @@ export class UsersService {
): Promise<AuthToken> {
const user = await this.getUserByUsername(userName);
let accessToken = '';
let randomString = '';
for (let i = 0; i < 100; i++) {
try {
const randomString = crypt.randomBytes(64).toString();
randomString = crypt.randomBytes(64).toString("base64");
accessToken = await this.hashPassword(randomString);
await this.getUserByAuthToken(accessToken);
} catch (NotInDBError) {
const token = AuthToken.create(user, identifier, accessToken);
return this.authTokenRepository.save(token);
const createdToken = this.authTokenRepository.save(token);
return {
accessToken: randomString,
...createdToken
}
}
}
// This should never happen
throw new RandomnessError(
'You machine is not able to generate not-in-use tokens. This should never happen.',
'Your machine is not able to generate not-in-use tokens. This should never happen.',
);
}