OBP-API icon indicating copy to clipboard operation
OBP-API copied to clipboard

Published 20 hours ago • verified publisher icon OpenBankProject

Do not allow SHA1?

Open sebtesobe opened this issue 8 years ago • 0 comments

SHA1 has been shattered: http://shattered.it/ (https://shattered.it/static/shattered.pdf)

src/main/scala/code/api/oauth1.0.scala allows the client to connect via SHA1. Maybe the API should be more restrictive and only allow SHA256?

sebtesobe avatar Feb 24 '17 10:02 sebtesobe