Commit e2079bf3 authored by Gabriel Mazetto's avatar Gabriel Mazetto

use secret_key_base instead of oauth uid and secret to encrypt access_token

parent a4d1c9ca
......@@ -65,8 +65,8 @@ module Gitlab
def logout_token_cipher(salt, operation)
cipher = OpenSSL::Cipher::AES.new(128, :CBC)
cipher.send(operation)
cipher.iv=salt
cipher.key="#{oauth_app.uid}#{oauth_app.secret}"
cipher.iv = salt
cipher.key = Gitlab::Application.secrets.secret_key_base
cipher
end
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment