Add salt to token JWT token payload [SCI-8854] ()

This commit is contained in:
artoscinote 2023-07-18 09:22:39 +02:00 committed by GitHub
parent 5a65b94ce3
commit ad4724ba04
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -10,6 +10,7 @@ module Api
payload[:exp] = Rails.configuration.x.core_api_token_ttl.from_now.to_i
end
payload[:iss] = Rails.configuration.x.core_api_token_iss
payload[:salt] = SecureRandom.base64(30)
JWT.encode(payload, KEY_SECRET, Rails.configuration.x.core_api_sign_alg)
end