From 273bed103c37c81d477998a46873437733ffc16e Mon Sep 17 00:00:00 2001
From: Joris
Date: Sat, 12 Aug 2023 22:20:23 +0200
Subject: Generate crypto random token instead of uuid

---
 src/controller/login.rs | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

(limited to 'src/controller/login.rs')

diff --git a/src/controller/login.rs b/src/controller/login.rs
index 9757c25..036e6fc 100644
--- a/src/controller/login.rs
+++ b/src/controller/login.rs
@@ -4,7 +4,6 @@ use hyper::{Body, Response};
 use sqlx::sqlite::SqlitePool;
 use std::collections::HashMap;
 use tera::{Context, Tera};
-use uuid::Uuid;
 
 use crate::controller::utils::with_headers;
 use crate::controller::wallet::Wallet;
@@ -29,7 +28,6 @@ pub async fn page(
     utils::template(assets, templates, "login.html", context)
 }
 
-// TODO rewrite
 pub async fn login(
     config: &Config,
     assets: &HashMap<String, String>,
@@ -43,8 +41,7 @@ pub async fn login(
             {
                 Some(hash) => match bcrypt::verify(login.password, &hash) {
                     Ok(true) => {
-                        // TODO generate truly random instead of uuid
-                        let login_token = Uuid::new_v4();
+                        let login_token = cookie::generate_token();
 
                         if db::users::set_login_token(
                             &pool,
@@ -53,7 +50,7 @@ pub async fn login(
                         )
                         .await
                         {
-                            match cookie::login(config, login_token) {
+                            match cookie::login(config, &login_token) {
                                 Ok(str) => with_headers(
                                     utils::redirect("/"),
                                     vec![(SET_COOKIE, &str)],
-- 
cgit v1.2.3