use secret_key_base instead of oauth uid and secret to encrypt access_token

e2079bf3 · Gabriel Mazetto · a4d1c9ca · e2079bf3
Commit e2079bf3 authored May 05, 2016 by Gabriel Mazetto
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

lib/gitlab/geo/oauth_session.rb lib/gitlab/geo/oauth_session.rb +2 -2

No files found.
--- a/lib/gitlab/geo/oauth_session.rb
+++ b/lib/gitlab/geo/oauth_session.rb
@@ -65,8 +65,8 @@ module Gitlab
      def logout_token_cipher(salt, operation)
        cipher = OpenSSL::Cipher::AES.new(128, :CBC)
        cipher.send(operation)
-        cipher.iv=salt
+        cipher.iv = salt
-        cipher.key="#{oauth_app.uid}#{oauth_app.secret}"
+        cipher.key = Gitlab::Application.secrets.secret_key_base
        cipher
      end