Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
e2079bf3
Commit
e2079bf3
authored
May 05, 2016
by
Gabriel Mazetto
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
use secret_key_base instead of oauth uid and secret to encrypt access_token
parent
a4d1c9ca
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
2 additions
and
2 deletions
+2
-2
lib/gitlab/geo/oauth_session.rb
lib/gitlab/geo/oauth_session.rb
+2
-2
No files found.
lib/gitlab/geo/oauth_session.rb
View file @
e2079bf3
...
...
@@ -65,8 +65,8 @@ module Gitlab
def
logout_token_cipher
(
salt
,
operation
)
cipher
=
OpenSSL
::
Cipher
::
AES
.
new
(
128
,
:CBC
)
cipher
.
send
(
operation
)
cipher
.
iv
=
salt
cipher
.
key
=
"
#{
oauth_app
.
uid
}#{
oauth_app
.
secret
}
"
cipher
.
iv
=
salt
cipher
.
key
=
Gitlab
::
Application
.
secrets
.
secret_key_base
cipher
end
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment