github/plexpy
1
0
Fork 0
mirror of https://github.com/Tautulli/Tautulli.git synced 2025-07-15 17:52:59 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Improve token security for Python 3

Browse source
This commit is contained in:
JonnyWong16 2021-07-01 09:21:46 -07:00
parent b4598dca20
commit 1f87799e57
No known key found for this signature in database
GPG key ID: B1F1F9807184697A
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
plexpy/webserve.py
View file

@ -43,6 +43,9 @@ import mako.exceptions
import websocket
if sys.version_info >= (3, 6):
import secrets
import plexpy
if plexpy.PYTHON2:
import activity_pinger
@ -4251,7 +4254,10 @@ class WebInterface(object):
def generate_api_key(self, device=None, **kwargs):
apikey = ''
while not apikey or apikey == plexpy.CONFIG.API_KEY or mobile_app.get_mobile_device_by_token(device_token=apikey):
apikey = plexpy.generate_uuid()
if sys.version_info >= (3, 6):
apikey = secrets.token_urlsafe(24)
else:
apikey = plexpy.generate_uuid()
logger.info("New API key generated.")
logger._BLACKLIST_WORDS.add(apikey)