From 44119e397585c1c63835b700ba70d0fca9209433 Mon Sep 17 00:00:00 2001 From: Muzaffer AKYIL Date: Sat, 16 Mar 2024 22:15:29 +0300 Subject: [PATCH 1/2] vulnerable fix & remove unused hangfire package CVE-2024-21319 : https://github.com/advisories/GHSA-59j7-ghrg-fj52 --- Core/Core.csproj | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/Core/Core.csproj b/Core/Core.csproj index 7462dc96..90affeea 100644 --- a/Core/Core.csproj +++ b/Core/Core.csproj @@ -13,7 +13,6 @@ - @@ -31,7 +30,7 @@ - + @@ -48,6 +47,6 @@ - + From a56f94865003d33f7e0d7dd2e6bb10d1f031149e Mon Sep 17 00:00:00 2001 From: Muzaffer AKYIL Date: Sat, 16 Mar 2024 22:38:18 +0300 Subject: [PATCH 2/2] securitykey changed to requirement sha256 size --- Tests/Helpers/Token/MockJwtTokens.cs | 4 ++-- WebAPI/appsettings.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Tests/Helpers/Token/MockJwtTokens.cs b/Tests/Helpers/Token/MockJwtTokens.cs index 9eb64da1..9c12a94d 100644 --- a/Tests/Helpers/Token/MockJwtTokens.cs +++ b/Tests/Helpers/Token/MockJwtTokens.cs @@ -1,4 +1,4 @@ -using System; +using System; using System.Collections.Generic; using System.IdentityModel.Tokens.Jwt; using System.Security.Claims; @@ -10,7 +10,7 @@ namespace Tests.Helpers.Token public static class MockJwtTokens { private static readonly JwtSecurityTokenHandler s_tokenHandler = new (); - private static string s_keyString = "!z2x3C4v5B*_*!z2x3C4v5B*_*"; + private static string s_keyString = "!z2x3C4v5B*_*!z2x3C4v5B*_*!z2x3C4v5B*_*"; static MockJwtTokens() { diff --git a/WebAPI/appsettings.json b/WebAPI/appsettings.json index 0f692ff7..32d546fb 100644 --- a/WebAPI/appsettings.json +++ b/WebAPI/appsettings.json @@ -3,7 +3,7 @@ "Audience": "www.devarchitecture.com", "Issuer": "www.devarchitecture.com", "AccessTokenExpiration": 10, - "SecurityKey": "!z2x3C4v5B*_*!z2x3C4v5B*_*" + "SecurityKey": "!z2x3C4v5B*_*!z2x3C4v5B*_*!z2x3C4v5B*_*" }, "EmailConfiguration": { "SmtpServer": "smtp.live.com",