mirrors/dendrite
1
0
Fork 0
mirror of https://github.com/matrix-org/dendrite.git synced 2025-04-11 03:14:27 -05:00
Code Issues Packages Projects Releases Wiki Activity

Comment

Browse source
This commit is contained in:
Kegan Dougal 2017-05-30 17:47:24 +01:00
parent 69fef88093
commit 1f8da07c41
1 changed files with 4 additions and 0 deletions

4
src/github.com/matrix-org/dendrite/clientapi/auth/auth.go
View file

@ -30,6 +30,10 @@ import (
) )
// UnknownDeviceID is the default device id if one is not specified. // UnknownDeviceID is the default device id if one is not specified.
// This deviates from Synapse which generates a new device ID if one is not specified.
// It's preferable to not amass a huge list of valid access tokens for an account,
// so limiting it to 1 unknown device for now limits the number of valid tokens.
// Clients should be giving us device IDs.
var UnknownDeviceID = "unknown-device" var UnknownDeviceID = "unknown-device"
// OWASP recommends at least 128 bits of entropy for tokens: https://www.owasp.org/index.php/Insufficient_Session-ID_Length // OWASP recommends at least 128 bits of entropy for tokens: https://www.owasp.org/index.php/Insufficient_Session-ID_Length