apifest / apifest-oauth20

ApiFest OAuth 2.0 Server - API security. The ApiFest OAuth 2.0 Server Java implementation of OAuth 2.0 protocol
http://apifest.com
69 stars 44 forks source link

Improve client credentials entropy #83

Closed msokolovski closed 7 years ago

msokolovski commented 7 years ago

Currently the code for generation of client id and client secret (RandomGenerator#96) has a weak entropy, which leaves gap for collisions and authentication errors.

The entropy can be improved with the following changes:

rossitsaborissova commented 7 years ago

Thanks for that improvement!