Projekte/web-base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Hash UserTokens for security improvement

Browse Source
This commit is contained in:
Roman
2024-12-27 13:02:39 +01:00
parent caab707a17
commit 771fc8675f
10 changed files with 767 additions and 272 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
Core/Objects/DatabaseEntity/UserToken.class.php
View File

@@ -21,7 +21,7 @@ class UserToken extends DatabaseEntity {
self::TYPE_INVITE, self::TYPE_GPG_CONFIRM
];
#[MaxLength(36)]
#[MaxLength(128)]
#[Visibility(Visibility::NONE)]
private string $token;
@@ -37,7 +37,7 @@ class UserToken extends DatabaseEntity {
public function __construct(User $user, string $token, string $type, int $validHours) {
parent::__construct();
$this->user = $user;
$this->token = $token;
$this->token = hash("sha512", $token, false);
$this->tokenType = $type;
$this->validUntil = (new \DateTime())->modify("+$validHours HOUR");
$this->used = false;
@@ -55,13 +55,4 @@ class UserToken extends DatabaseEntity {
public function getUser(): User {
return $this->user;
}
public function updateDurability(SQL $sql, int $validHours): bool {
$this->validUntil = (new \DateTime())->modify("+$validHours HOURS");
return $this->save($sql, ["validUntil"]);
}
public function getToken(): string {
return $this->token;
}
}