From 3a7ee10369e13063717f982648d676b709d88e9c Mon Sep 17 00:00:00 2001 From: Marius Gavrilescu Date: Wed, 22 Mar 2017 23:49:53 +0200 Subject: [PATCH] Prevent blocking when making reset key --- lib/Plack/Middleware/Auth/Complex.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Plack/Middleware/Auth/Complex.pm b/lib/Plack/Middleware/Auth/Complex.pm index 53ff827..bc6a33b 100644 --- a/lib/Plack/Middleware/Auth/Complex.pm +++ b/lib/Plack/Middleware/Auth/Complex.pm @@ -11,7 +11,7 @@ use re '/s'; use Authen::Passphrase; use Authen::Passphrase::BlowfishCrypt; -use Bytes::Random::Secure qw/random_bytes/; +use Bytes::Random::Secure qw//; use Carp qw/croak/; use DBI; use Digest::SHA qw/hmac_sha1_base64 sha256/; @@ -100,7 +100,7 @@ sub set_passphrase { sub make_reset_hmac { my ($self, $username, @data) = @_; - $self->{hmackey} //= random_bytes 512; # uncoverable condition false + $self->{hmackey} //= Bytes::Random::Secure->new(NonBlocking => 1)->bytes(512); # uncoverable condition false my $user = $self->get_user($username); my $message = join ' ', $username, $user->{passphrase}, @data; hmac_sha1_base64 $message, $self->{hmackey}; -- 2.30.2