tyler
/
proxmox-backup
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

auth_helpers.rs: add timestamp to csrf token

This commit is contained in:
Dietmar Maurer 2019-01-29 17:50:03 +01:00
parent 1e76cbc6a2
commit cf671670a0
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/auth_helpers.rs
View File

@ -17,15 +17,16 @@ pub fn assemble_csrf_prevention_token(
let epoch = std::time::SystemTime::now().duration_since( let epoch = std::time::SystemTime::now().duration_since(
std::time::SystemTime::UNIX_EPOCH).unwrap().as_secs(); std::time::SystemTime::UNIX_EPOCH).unwrap().as_secs();
let stamp = format!("{:08X}:{}:", epoch, username); let timestamp = format!("{:08X}", epoch);
let mut hasher = sha::Sha256::new(); let mut hasher = sha::Sha256::new();
hasher.update(stamp.as_bytes()); let data = format!("{:08X}:{}:", epoch, username);
hasher.update(data.as_bytes());
hasher.update(secret); hasher.update(secret);
let digest = hasher.finish(); let digest = base64::encode_config(&hasher.finish(), base64::STANDARD_NO_PAD);
base64::encode_config(&digest, base64::STANDARD_NO_PAD) format!("{:08X}:{}", epoch, digest)
} }
pub fn generate_csrf_key() -> Result<(), Error> { pub fn generate_csrf_key() -> Result<(), Error> {