Skip to content

Commit 8d9efc6

Browse files
committed
fix(security): prevent predictable session secret in PAT-only auth
1 parent fd043c9 commit 8d9efc6

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

src/module/src/module.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -166,6 +166,7 @@ export default defineNuxtModule<ModuleOptions>({
166166
sessionSecret: createHash('md5').update([
167167
options.auth?.github?.clientId,
168168
options.auth?.github?.clientSecret,
169+
options.auth?.github?.pat,
169170
].join('')).digest('hex'),
170171
// @ts-expect-error todo fix github type issue
171172
github: options.auth?.github,

0 commit comments

Comments
 (0)