Use secure confirmation token generator

icebreaker-science / backend

The backend (Spring Boot) part of the icebreaker.science application

Apache License 2.0

2 stars 0 forks source link

Closed chaoran-chen closed 4 years ago

chaoran-chen commented 4 years ago

AccountService.saveAccountConfirmationTokenAndSendEmail() should use a secure token generator. UUID.randomUUID() is not secure.

michael-kamel commented 4 years ago

This should do