diff options
| author | Julien Veyssier <julien-nc@posteo.net> | 2023-06-20 11:54:43 +0200 |
|---|---|---|
| committer | Julien Veyssier <julien-nc@posteo.net> | 2023-10-05 14:24:02 +0200 |
| commit | 807f173dec7288945fca98548e80e43d3e401d12 (patch) | |
| tree | 72918c69010f20e6f70b2dd0215bc8bea051cc9f /core/Controller/ClientFlowLoginController.php | |
| parent | f3f2d9b9784ef3a9304543969a0a88cd1f1054d8 (diff) | |
| download | nextcloud-server-807f173dec7288945fca98548e80e43d3e401d12.tar.gz nextcloud-server-807f173dec7288945fca98548e80e43d3e401d12.zip | |
make oauth2 authorization code expire after 10 minutes
Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
Diffstat (limited to 'core/Controller/ClientFlowLoginController.php')
| -rw-r--r-- | core/Controller/ClientFlowLoginController.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/core/Controller/ClientFlowLoginController.php b/core/Controller/ClientFlowLoginController.php index 3f92ad8cf30..05321c9222a 100644 --- a/core/Controller/ClientFlowLoginController.php +++ b/core/Controller/ClientFlowLoginController.php @@ -46,6 +46,7 @@ use OCP\AppFramework\Http\Attribute\IgnoreOpenAPI; use OCP\AppFramework\Http\Attribute\UseSession; use OCP\AppFramework\Http\Response; use OCP\AppFramework\Http\StandaloneTemplateResponse; +use OCP\AppFramework\Utility\ITimeFactory; use OCP\Defaults; use OCP\EventDispatcher\IEventDispatcher; use OCP\IL10N; @@ -76,6 +77,7 @@ class ClientFlowLoginController extends Controller { private AccessTokenMapper $accessTokenMapper, private ICrypto $crypto, private IEventDispatcher $eventDispatcher, + private ITimeFactory $timeFactory, ) { parent::__construct($appName, $request); } @@ -287,6 +289,7 @@ class ClientFlowLoginController extends Controller { $accessToken->setEncryptedToken($this->crypto->encrypt($token, $code)); $accessToken->setHashedCode(hash('sha512', $code)); $accessToken->setTokenId($generatedToken->getId()); + $accessToken->setCreatedAt($this->timeFactory->now()->getTimestamp()); $this->accessTokenMapper->insert($accessToken); $redirectUri = $client->getRedirectUri(); |