yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-12-25 06:04:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check token salt on hash

Browse Source
This commit is contained in:
Convly 2023-02-27 19:10:04 +01:00
parent ae23359954
commit 9afb0ad86d
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packages/core/admin/server/services/transfer/token.js
View File

@ -328,6 +328,12 @@ const getExpirationFields = (lifespan) => {
* @returns {string}
*/
const hash = (accessKey) => {
const { hasValidTokenSalt } = getService('transfer').utils;
if (!hasValidTokenSalt()) {
throw new TypeError('Required token salt is not defined');
}
return crypto
.createHmac('sha512', strapi.config.get('admin.transfer.token.salt'))
.update(accessKey)