From 88b4f98c41bba0400aa6e6aadb789a7a647d6946 Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Wed, 21 Sep 2022 10:16:07 +0200 Subject: [PATCH] Make sure session cookie salt in AuthController is loaded dynamically Signed-off-by: Thomas Citharel --- lib/web/controllers/auth_controller.ex | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/lib/web/controllers/auth_controller.ex b/lib/web/controllers/auth_controller.ex index 1e1903f4f..2f743d774 100644 --- a/lib/web/controllers/auth_controller.ex +++ b/lib/web/controllers/auth_controller.ex @@ -11,7 +11,7 @@ defmodule Mobilizon.Web.AuthController do plug(Plug.Session, store: :cookie, key: "_auth_callback", - signing_salt: Keyword.get(endpoint_config, :secret_key_base) + signing_salt: {Mobilizon.Web.AuthController, :secret_key_base, []} ) plug(Ueberauth) @@ -141,7 +141,9 @@ defmodule Mobilizon.Web.AuthController do redirect(conn, to: "/login?code=Error with Login Provider&provider=#{provider_name}") end - defp endpoint_config do - Application.get_env(:mobilizon, Mobilizon.Web.Endpoint, []) + def secret_key_base do + :mobilizon + |> Application.get_env(Mobilizon.Web.Endpoint, []) + |> Keyword.get(:secret_key_base) end end