⬆️ Upgrade bunny hash and sign

backend/src/uxbox/config.clj

@@ -77,7 +77,7 @@
     (when-not secret
       (ex/raise :code ::missing-secret-key
                 :message "Missing `:secret` key in config."))
-    (hash/blake2b-256 secret)))
+    (hash/blake2b-512 secret)))
 
 (defstate secret
   :start (initialize-secret config))

backend/src/uxbox/services/auth.clj

@@ -10,6 +10,7 @@
             [buddy.hashers :as hashers]
             [buddy.sign.jwt :as jwt]
             [buddy.core.hash :as hash]
+            [clj-ldap.client :as ldap]
             [uxbox.config :as cfg]
             [uxbox.util.spec :as us]
             [uxbox.db :as db]

backend/src/uxbox/util/token.clj

@@ -17,7 +17,7 @@
   using urlsafe variant of base64."
   []
   (-> (nonce/random-bytes 1024)
-      (hash/blake2b-256)
+      (hash/blake2b-512)
       (b64/encode true)
       (codecs/bytes->str)))