From e576d981f9f9281d1db997ce079d2a0f83d23372 Mon Sep 17 00:00:00 2001 From: Jan Dittberner Date: Sun, 12 May 2024 12:15:58 +0200 Subject: [PATCH] Reduce minimum CSRF key length to 256 bits --- cmd/idp/main.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/idp/main.go b/cmd/idp/main.go index f9217a5..edaa81a 100644 --- a/cmd/idp/main.go +++ b/cmd/idp/main.go @@ -56,7 +56,7 @@ const ( sessionKeyLength = 32 sessionAuthKeyLength = 64 - minCSRFKeyLength = 64 + minCSRFKeyLength = 32 ) var (