fix(emqx_mgmt_auth): better randomisation of app secrets

change from timestamp seeded hash (uuid) to crypto:strong_rand_bytes
2022-04-25 11:38:28 +02:00 · 2022-04-25 11:38:28 +02:00 · 5ecc427dce
parent 0a16c9fabf
commit 5ecc427dce
1 changed files with 2 additions and 1 deletions
--- a/apps/emqx_management/src/emqx_mgmt_auth.erl
+++ b/apps/emqx_management/src/emqx_mgmt_auth.erl
@ -182,4 +182,5 @@ trans(Fun) ->
    end.

 generate_api_secret() ->
-    emqx_guid:to_base62(emqx_guid:gen()).
+    Random = crypto:strong_rand_bytes(32),
+    emqx_base62:encode(Random).