• Douglas Barbosa Alexandre's avatar
    Switch from CBC to GCM for Geo logout tokens · 6950c11f
    Douglas Barbosa Alexandre authored
    The AES-256-GCM cipher is the current best practice for symmetric
    encryption. It also allows us to protect with authentication the
    content of the return_to and validate everything on the Geo primary
    node, otherwise, we can open a security hole.
    6950c11f
logout_state.rb 2.33 KB