diff --git a/backend/project.clj b/backend/project.clj index 49538471d..b9304259d 100644 --- a/backend/project.clj +++ b/backend/project.clj @@ -28,8 +28,8 @@ :exclusions [org.clojure/tools.reader]] [niwinz/migrante "0.1.0"] - [buddy/buddy-sign "1.4.0"] - [buddy/buddy-hashers "1.2.0"] + [buddy/buddy-sign "2.2.0"] + [buddy/buddy-hashers "1.3.0"] [org.xerial.snappy/snappy-java "1.1.2.6"] [com.github.spullara.mustache.java/compiler "0.9.4"] diff --git a/backend/src/uxbox/config.clj b/backend/src/uxbox/config.clj index 2e65dfbb1..c49969108 100644 --- a/backend/src/uxbox/config.clj +++ b/backend/src/uxbox/config.clj @@ -77,7 +77,7 @@ (when-not secret (ex/raise :code ::missing-secret-key :message "Missing `:secret` key in config.")) - (hash/blake2b-256 secret))) + (hash/blake2b-512 secret))) (defstate secret :start (initialize-secret config)) diff --git a/backend/src/uxbox/services/auth.clj b/backend/src/uxbox/services/auth.clj index 69d1c60ea..67defb8f6 100644 --- a/backend/src/uxbox/services/auth.clj +++ b/backend/src/uxbox/services/auth.clj @@ -10,6 +10,7 @@ [buddy.hashers :as hashers] [buddy.sign.jwt :as jwt] [buddy.core.hash :as hash] + [clj-ldap.client :as ldap] [uxbox.config :as cfg] [uxbox.util.spec :as us] [uxbox.db :as db] diff --git a/backend/src/uxbox/util/token.clj b/backend/src/uxbox/util/token.clj index 605c9af1f..5fb993729 100644 --- a/backend/src/uxbox/util/token.clj +++ b/backend/src/uxbox/util/token.clj @@ -17,7 +17,7 @@ using urlsafe variant of base64." [] (-> (nonce/random-bytes 1024) - (hash/blake2b-256) + (hash/blake2b-512) (b64/encode true) (codecs/bytes->str)))