feat(security): prefix argos token by "argos_"

argos-ci · Dec 30, 2024 · cb719a5 · cb719a5
1 parent e0423f0
commit cb719a5
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 5 deletions.
diff --git a/apps/backend/src/database/models/Project.ts b/apps/backend/src/database/models/Project.ts
@@ -243,8 +243,12 @@ export class Project extends Model {
     return false;
   }
 
+  /**
+   * Generate a new token for the project.
+   */
   static async generateToken() {
-    return generateRandomHexString();
+    const token = await generateRandomHexString(34);
+    return `argos_${token}`;
   }
 
   /**

diff --git a/apps/backend/src/database/models/Team.ts b/apps/backend/src/database/models/Team.ts
@@ -179,7 +179,7 @@ export class Team extends Model {
 
   async $getInviteLink() {
     if (!this.inviteSecret) {
-      this.inviteSecret = await generateRandomHexString();
+      this.inviteSecret = await generateRandomHexString(20);
       await Team.query()
         .findById(this.id)
         .patch({ inviteSecret: this.inviteSecret });

diff --git a/apps/backend/src/database/services/crypto.ts b/apps/backend/src/database/services/crypto.ts
@@ -3,7 +3,10 @@ import { promisify } from "node:util";
 
 const generateRandomBytes = promisify(randomBytes);
 
-export const generateRandomHexString = async () => {
-  const token = await generateRandomBytes(20);
+/**
+ * Generates a random hex string of the given length.
+ */
+export async function generateRandomHexString(length: number): Promise<string> {
+  const token = await generateRandomBytes(length / 2);
   return token.toString("hex");
-};
+}