feat: state using crypto

elibosley · elibosley · commit afce13099f50 · 2025-01-27T13:34:32.000-05:00
diff --git a/web/components/SsoButton.ce.vue b/web/components/SsoButton.ce.vue
@@ -49,8 +49,9 @@ const getStateToken = (): string | null => {
 };
 
 const generateStateToken = (): string => {
-  const state =
-    Math.random().toString(36).substring(2, 15) + Math.random().toString(36).substring(2, 15);
+  const array = new Uint8Array(32);
+  window.crypto.getRandomValues(array);
+  const state = Array.from(array, byte => byte.toString(16).padStart(2, '0')).join('');
   sessionStorage.setItem('sso_state', state);
   return state;
 };
