From ad4724ba045e1c027b05f9d5da59faf68964752e Mon Sep 17 00:00:00 2001
From: artoscinote <85488244+artoscinote@users.noreply.github.com>
Date: Tue, 18 Jul 2023 09:22:39 +0200
Subject: [PATCH] Add salt to token JWT token payload [SCI-8854] (#5791)

---
 app/services/api/core_jwt.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/services/api/core_jwt.rb b/app/services/api/core_jwt.rb
index 14b0b2795..55250aea8 100644
--- a/app/services/api/core_jwt.rb
+++ b/app/services/api/core_jwt.rb
@@ -10,6 +10,7 @@ module Api
         payload[:exp] = Rails.configuration.x.core_api_token_ttl.from_now.to_i
       end
       payload[:iss] = Rails.configuration.x.core_api_token_iss
+      payload[:salt] = SecureRandom.base64(30)
       JWT.encode(payload, KEY_SECRET, Rails.configuration.x.core_api_sign_alg)
     end