Use sha1 with hmac.new instead of md5

This commit is contained in:
Bill Nottingham 2017-03-27 14:32:27 -04:00
parent 94a7cf0858
commit a15b67f76b
2 changed files with 4 additions and 2 deletions

View File

@ -3,6 +3,7 @@
# Python
import datetime
import hashlib
import hmac
import logging
from urlparse import urljoin
@ -152,7 +153,7 @@ class AdHocCommand(UnifiedJob, JobNotificationMixin):
def task_auth_token(self):
'''Return temporary auth token used for task requests via API.'''
if self.status == 'running':
h = hmac.new(settings.SECRET_KEY, self.created.isoformat())
h = hmac.new(settings.SECRET_KEY, self.created.isoformat(), digestmod=hashlib.sha1)
return '%d-%s' % (self.pk, h.hexdigest())
@property

View File

@ -3,6 +3,7 @@
# Python
import datetime
import hashlib
import hmac
import logging
import time
@ -480,7 +481,7 @@ class Job(UnifiedJob, JobOptions, SurveyJobMixin, JobNotificationMixin):
def task_auth_token(self):
'''Return temporary auth token used for task requests via API.'''
if self.status == 'running':
h = hmac.new(settings.SECRET_KEY, self.created.isoformat())
h = hmac.new(settings.SECRET_KEY, self.created.isoformat(), digestmod=hashlib.sha1)
return '%d-%s' % (self.pk, h.hexdigest())
@property