mirror of
https://github.com/codeninjasllc/discourse.git
synced 2025-03-14 00:50:14 -04:00
FEATURE: change SSO to use sha256 HMAC, which is more secure
This commit is contained in:
parent
8cbff3672f
commit
890d06ac04
1 changed files with 1 additions and 1 deletions
|
@ -43,7 +43,7 @@ class SingleSignOn
|
|||
end
|
||||
|
||||
def sign(payload)
|
||||
Digest::SHA2.hexdigest(payload + sso_secret)
|
||||
OpenSSL::HMAC.hexdigest("sha256", sso_secret, payload)
|
||||
end
|
||||
|
||||
|
||||
|
|
Loading…
Reference in a new issue