evaluator: use cryputil to hash (#2384)

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
This commit is contained in:
bobby 2021-07-22 06:15:54 -07:00 committed by GitHub
parent c7a8f11d9a
commit aa0e6872de
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -2,8 +2,6 @@ package evaluator
import ( import (
"context" "context"
"crypto/sha256"
"encoding/hex"
"fmt" "fmt"
"net/http" "net/http"
"strconv" "strconv"
@ -15,6 +13,7 @@ import (
"github.com/pomerium/pomerium/config" "github.com/pomerium/pomerium/config"
"github.com/pomerium/pomerium/internal/log" "github.com/pomerium/pomerium/internal/log"
"github.com/pomerium/pomerium/internal/telemetry/trace" "github.com/pomerium/pomerium/internal/telemetry/trace"
"github.com/pomerium/pomerium/pkg/cryptutil"
"github.com/pomerium/pomerium/pkg/policy" "github.com/pomerium/pomerium/pkg/policy"
) )
@ -116,13 +115,9 @@ func NewPolicyEvaluator(ctx context.Context, store *Store, configPolicy *config.
return nil, err return nil, err
} }
h := sha256.New()
h.Write([]byte(script))
checksum := hex.EncodeToString(h.Sum(nil))
e.queries = append(e.queries, policyQuery{ e.queries = append(e.queries, policyQuery{
PreparedEvalQuery: q, PreparedEvalQuery: q,
checksum: checksum, checksum: fmt.Sprintf("%x", cryptutil.Hash("script", []byte(script))),
}) })
} }