libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

Merge pull request #1815 from abstractj/KEYCLOAK-2064

Browse source 
KEYCLOAK-2064: Update pax-web to make use of SecureRandom
This commit is contained in:
Stian Thorgersen 2015-11-12 13:35:33 +01:00
commit ee0dd7e200
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
integration/osgi-adapter/src/main/java/org/keycloak/adapters/osgi/PaxWebIntegrationService.java
View file

@ -1,9 +1,9 @@
package org.keycloak.adapters.osgi; package org.keycloak.adapters.osgi;
import java.net.URL; import java.net.URL;
import java.security.SecureRandom;
import java.util.Arrays; import java.util.Arrays;
import java.util.List; import java.util.List;
import java.util.Random;
import org.eclipse.jetty.security.ConstraintMapping; import org.eclipse.jetty.security.ConstraintMapping;
import org.eclipse.jetty.util.security.Constraint; import org.eclipse.jetty.util.security.Constraint;
@ -133,7 +133,8 @@ public class PaxWebIntegrationService {
Constraint constraint = constraintMapping.getConstraint(); Constraint constraint = constraintMapping.getConstraint();
String[] roles = constraint.getRoles(); String[] roles = constraint.getRoles();
// name property is unavailable on constraint object :/ // name property is unavailable on constraint object :/
String name = "Constraint-" + new Random().nextInt();
String name = "Constraint-" + new SecureRandom().nextInt(Integer.MAX_VALUE);
int dataConstraint = constraint.getDataConstraint(); int dataConstraint = constraint.getDataConstraint();
String dataConstraintStr; String dataConstraintStr;