Merge pull request Sorcery#19 from kyuden/use_urlsafe_base64

Use urlsafe_base64 for url sensitive chars
willnet · Dec 5, 2016 · ef20641 · ef20641
2 parents 24b92b4 + 428534c
commit ef20641
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/sorcery/model/temporary_token.rb b/lib/sorcery/model/temporary_token.rb
@@ -12,7 +12,7 @@ def self.included(base)
 
       # Random code, used for salt and temporary tokens.
       def self.generate_random_token
-        SecureRandom.base64(15).tr('+/=lIO0', 'pqrsxyz')
+        SecureRandom.urlsafe_base64(15).tr('lIO0', 'sxyz')
       end
 
       module ClassMethods