3pp-mirror/pushbits
1
0
Fork 0
mirror of https://github.com/pushbits/server.git synced 2025-05-24 22:36:33 +02:00
Code Issues Projects Releases Packages Wiki Activity

Reintroduce check for minimum token length

Browse source
This commit is contained in:
eikendev 2022-02-12 18:58:43 +01:00
parent 47f10c03ae
commit 500a8cd4b0
No known key found for this signature in database
GPG key ID: A1BDB1B28C8EF694
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
internal/authentication/token_test.go
View file

@ -7,6 +7,10 @@ import (
"github.com/stretchr/testify/require" "github.com/stretchr/testify/require"
) )
const (
minTokenLength = 14
)
func isGoodToken(assert *assert.Assertions, require *require.Assertions, token string, compat bool) { func isGoodToken(assert *assert.Assertions, require *require.Assertions, token string, compat bool) {
if compat { if compat {
assert.Equal(len(token), compatTokenLength, "Unexpected compatibility token length") assert.Equal(len(token), compatTokenLength, "Unexpected compatibility token length")
@ -14,6 +18,8 @@ func isGoodToken(assert *assert.Assertions, require *require.Assertions, token s
assert.Equal(len(token), regularTokenLength, "Unexpected regular token length") assert.Equal(len(token), regularTokenLength, "Unexpected regular token length")
} }
assert.GreaterOrEqual(len(token), minTokenLength, "Token is too short to give sufficient entropy")
prefix := token[0:len(applicationTokenPrefix)] prefix := token[0:len(applicationTokenPrefix)]
assert.Equal(prefix, applicationTokenPrefix, "Invalid token prefix") assert.Equal(prefix, applicationTokenPrefix, "Invalid token prefix")