Uploaded image for project: 'COmanage Framework Migration'
  1. COmanage Framework Migration
  2. CFM-95 Security
  3. CFM-304

Remove Hyphens From Auto-Generated Tokens

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Unresolved
    • Minor
    • PE Milestone 9 (Stitching Time!)
    • None

    Description

      App\Lib\Random\RandomString::generateAppKey() inserts dashes into the generated string, but it would probably be better for the dashes to be UI elements that are ignored in the actual token. eg: The UI (or maybe the Message Template processor) should insert dashes as needed, and then validation code should remove them when present.

      Alternately, generateAppKey might continue to generate dashes (since application keys are generally copy/pasted) but a different function (eg: generateConfirmationCode) would generate a token without dashes for other purposes (eg: Email Confirmation).

      Attachments

        Issue Links

          Activity

            People

              benn.oshrin@at.internet2.edu Benn Oshrin (internet2.edu)
              benn.oshrin@at.internet2.edu Benn Oshrin (internet2.edu)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: