yesod-auth-oauth2/src
patrick brisbin cd3875b797 Strengthen random state token generation
Previously:

- System.Random, which seeds from system time (possible attack)
- 30 characters, a-z (low entropy)

Now:

- Crypto.Random, accepted as "cryptographically secure"
- 64 random bytes, Base64-encoded

cryptonite was already a transitive dependency, so there is really no
downside to this.

Fixes #132.
2020-08-20 11:38:20 -04:00
..
URI/ByteString Add GitLab support 2018-07-29 09:45:00 -04:00
Yesod/Auth Strengthen random state token generation 2020-08-20 11:38:20 -04:00