From: Marius Gavrilescu Date: Wed, 22 Mar 2017 21:49:53 +0000 (+0200) Subject: Prevent blocking when making reset key X-Git-Tag: 0.002~2 X-Git-Url: http://git.ieval.ro/?a=commitdiff_plain;h=3a7ee10369e13063717f982648d676b709d88e9c;p=plack-middleware-auth-complex.git Prevent blocking when making reset key --- diff --git a/lib/Plack/Middleware/Auth/Complex.pm b/lib/Plack/Middleware/Auth/Complex.pm index 53ff827..bc6a33b 100644 --- a/lib/Plack/Middleware/Auth/Complex.pm +++ b/lib/Plack/Middleware/Auth/Complex.pm @@ -11,7 +11,7 @@ use re '/s'; use Authen::Passphrase; use Authen::Passphrase::BlowfishCrypt; -use Bytes::Random::Secure qw/random_bytes/; +use Bytes::Random::Secure qw//; use Carp qw/croak/; use DBI; use Digest::SHA qw/hmac_sha1_base64 sha256/; @@ -100,7 +100,7 @@ sub set_passphrase { sub make_reset_hmac { my ($self, $username, @data) = @_; - $self->{hmackey} //= random_bytes 512; # uncoverable condition false + $self->{hmackey} //= Bytes::Random::Secure->new(NonBlocking => 1)->bytes(512); # uncoverable condition false my $user = $self->get_user($username); my $message = join ' ', $username, $user->{passphrase}, @data; hmac_sha1_base64 $message, $self->{hmackey};