itizawa 5 лет назад
Родитель
Сommit
15276ff988
1 измененных файлов с 5 добавлено и 5 удалено
  1. 5 5
      src/server/routes/apiv3/slack-integration.js

+ 5 - 5
src/server/routes/apiv3/slack-integration.js

@@ -55,9 +55,9 @@ module.exports = (crowi) => {
   }
 
 
-  function generateAccessToken() {
-    const hasher = crypto.createHash('sha256');
-    hasher.update(`${new Date().getTime()}`);
+  function generateAccessToken(user) {
+    const hasher = crypto.createHash('sha512');
+    hasher.update(new Date().getTime() + user._id);
 
     return hasher.digest('base64');
   }
@@ -158,10 +158,10 @@ module.exports = (crowi) => {
    *          200:
    *            description: Succeeded to update access token for slack
    */
-  router.put('/access-token', loginRequiredStrictly, adminRequired, csrf, async(req, res) => {
+  router.put('/access-token', loginRequiredStrictly, adminRequired, async(req, res) => {
 
     try {
-      const accessToken = generateAccessToken();
+      const accessToken = generateAccessToken(req.user);
       await updateSlackBotSettings({ 'slackbot:access-token': accessToken });
 
       return res.apiv3({ accessToken });