mix
8ce050ef7f
Initial feature-complete implementation of the v1.0 specification (phases 0-11 of `docs/implementation-plan.md`). Added: - Panel (Go, single static binary) with SQLite persistence, one-time - Domain management with per-domain DKIM (RSA-2048, generated in pure Go) and - Application (sender identity) management: SASL credentials via `sasldb2`, - Full Postfix relay config generated from env at container start: SMTPS 465, - Journal milter (pure Go, `go-milter`) recording every send to `send_log`; … (6 more in CHANGELOG) Full detail: CHANGELOG.md (0.1.0).
21 lines
630 B
Go
21 lines
630 B
Go
package web
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"encoding/base64"
|
|
)
|
|
|
|
// randomToken returns a URL-safe token with at least nBytes*8 bits of entropy
|
|
// drawn from crypto/rand. Setup and session tokens both use this; the setup
|
|
// token needs >=128 bits (spec 7.6.1), so callers pass nBytes >= 16.
|
|
//
|
|
// It panics if the system RNG fails: that is unrecoverable and must never be
|
|
// papered over with a weak fallback for a security token.
|
|
func randomToken(nBytes int) string {
|
|
b := make([]byte, nBytes)
|
|
if _, err := rand.Read(b); err != nil {
|
|
panic("crypto/rand failed: " + err.Error())
|
|
}
|
|
return base64.RawURLEncoding.EncodeToString(b)
|
|
}
|