use the domain in the secret hmac.

2026-06-12 04:13:30 -07:00 · 2021-08-20 08:59:08 -03:00
parent d6354c1c69
commit 15bab1fcfb
1 changed files with 1 additions and 1 deletions
@@ -78,7 +78,7 @@ func main() {

 	router.Path("/grab").HandlerFunc(
 		func(w http.ResponseWriter, r *http.Request) {
-			name := []byte(r.FormValue("name"))
+			name := []byte(r.FormValue("name") + "@" + s.Domain)

 			mac := hmac.New(sha256.New, []byte(s.Secret))
 			mac.Write(name)