From 490b3494db588f7ddffe4b2267e4457c0f855f77 Mon Sep 17 00:00:00 2001 From: Eric Chiang Date: Mon, 3 Oct 2016 17:38:32 -0700 Subject: [PATCH] storage: increase the number of bytes randomly generated for IDs Because these values are used for OAuth2 codes, refresh tokens, etc, they shouldn't be guessable. Increase the number of random bytes from 64 to 128. --- storage/storage.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/storage/storage.go b/storage/storage.go index da441b19..4a92485b 100644 --- a/storage/storage.go +++ b/storage/storage.go @@ -30,7 +30,7 @@ var encoding = base32.NewEncoding("abcdefghijklmnopqrstuvwxyz234567") // NewID returns a random string which can be used as an ID for objects. func NewID() string { - buff := make([]byte, 8) // 64 bit random ID. + buff := make([]byte, 16) // 128 bit random ID. if _, err := io.ReadFull(rand.Reader, buff); err != nil { panic(err) }