From 0a39a17407deff6b8aee6a8fa13e38eedb6a2a7d Mon Sep 17 00:00:00 2001 From: Joseph Milazzo Date: Mon, 31 May 2021 10:14:39 -0500 Subject: [PATCH] TokenKey Generation (#235) * Fixed #223. Now we generate a 128 byte JWT token key (recommendation) for user on first run. --- API/Program.cs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/API/Program.cs b/API/Program.cs index e59a9fbb0..3bee9e202 100644 --- a/API/Program.cs +++ b/API/Program.cs @@ -35,11 +35,13 @@ namespace API public static async Task Main(string[] args) { + Console.OutputEncoding = System.Text.Encoding.UTF8; + // Before anything, check if JWT has been generated properly or if user still has default if (!Configuration.CheckIfJwtTokenSet(GetAppSettingFilename()) && Environment.GetEnvironmentVariable("ASPNETCORE_ENVIRONMENT") != Environments.Development) { Console.WriteLine("Generating JWT TokenKey for encrypting user sessions..."); - var rBytes = new byte[24]; + var rBytes = new byte[128]; using (var crypto = new RNGCryptoServiceProvider()) crypto.GetBytes(rBytes); var base64 = Convert.ToBase64String(rBytes).Replace("/", ""); Configuration.UpdateJwtToken(GetAppSettingFilename(), base64);