mirrors/btcpayserver
1
0
Fork 0
mirror of https://github.com/btcpayserver/btcpayserver.git synced 2025-02-22 06:21:44 +01:00
Code Issues Projects Releases Packages Wiki Activity

Use good rng for generating API keys

Browse source
This commit is contained in:
nicolas.dorier 2020-03-10 21:30:46 +09:00
parent 691a8d6fd8
commit 153992a458
No known key found for this signature in database
GPG key ID: 6618763EF09186FE
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
BTCPayServer/Controllers/ManageController.APIKeys.cs
View file

@ -10,6 +10,8 @@ using BTCPayServer.Security;
using BTCPayServer.Security.APIKeys; using BTCPayServer.Security.APIKeys;
using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc; using Microsoft.AspNetCore.Mvc;
using NBitcoin;
using NBitcoin.DataEncoders;
using NSwag.Annotations; using NSwag.Annotations;
namespace BTCPayServer.Controllers namespace BTCPayServer.Controllers
@ -247,7 +249,7 @@ namespace BTCPayServer.Controllers
{ {
var key = new APIKeyData() var key = new APIKeyData()
{ {
Id = Guid.NewGuid().ToString().Replace("-", string.Empty, StringComparison.OrdinalIgnoreCase), Id = Encoders.Hex.EncodeData(RandomUtils.GetBytes(20)),
Type = APIKeyType.Permanent, Type = APIKeyType.Permanent,
UserId = _userManager.GetUserId(User), UserId = _userManager.GetUserId(User),
Label = viewModel.Label Label = viewModel.Label