Skip to content

[stable28] [oauth2] Store hashed secret instead of encrypted#47701

Merged
AndyScherzinger merged 3 commits intostable28from
backport/47635/stable28
Sep 3, 2024
Merged

[stable28] [oauth2] Store hashed secret instead of encrypted#47701
AndyScherzinger merged 3 commits intostable28from
backport/47635/stable28

Conversation

@julien-nc
Copy link
Member

Manual backport of #47635

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
@julien-nc
Copy link
Member Author

/compile

try {
$storedClientSecret = $this->crypto->decrypt($client->getSecret());
$storedClientSecretHash = $client->getSecret();
$clientSecretHash = bin2hex($this->crypto->calculateHMAC($client_secret));

Check notice

Code scanning / Psalm

PossiblyNullArgument

Argument 1 of OCP\Security\ICrypto::calculateHMAC cannot be null, possibly null value provided
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@AndyScherzinger AndyScherzinger merged commit c55ca78 into stable28 Sep 3, 2024
@AndyScherzinger AndyScherzinger deleted the backport/47635/stable28 branch September 3, 2024 15:25
@blizzz blizzz mentioned this pull request Sep 4, 2024
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants