tommy/mobilizon
1
0
Fork 0
forked from potsda.mn/mobilizon
Code Pull requests Activity

Make sure session cookie salt in AuthController is loaded dynamically

Browse source 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
Thomas Citharel 2022-09-21 10:16:07 +02:00
parent 6675c62d94
commit 88b4f98c41
No known key found for this signature in database
GPG key ID: A061B9DDE0CA0773
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/web/controllers/auth_controller.ex
View file

@ -11,7 +11,7 @@ defmodule Mobilizon.Web.AuthController do
plug(Plug.Session,
store: :cookie,
key: "_auth_callback",
signing_salt: Keyword.get(endpoint_config, :secret_key_base)
signing_salt: {Mobilizon.Web.AuthController, :secret_key_base, []}
)
plug(Ueberauth)
@ -141,7 +141,9 @@ defmodule Mobilizon.Web.AuthController do
redirect(conn, to: "/login?code=Error with Login Provider&provider=#{provider_name}")
end
defp endpoint_config do
Application.get_env(:mobilizon, Mobilizon.Web.Endpoint, [])
def secret_key_base do
:mobilizon
|> Application.get_env(Mobilizon.Web.Endpoint, [])
|> Keyword.get(:secret_key_base)
end
end