mirror of
https://github.com/keycloak/keycloak.git
synced 2026-04-08 18:50:36 -04:00
- replace non-cryptographic PRNG usage (java.util.Random, Math.random) - use SecureRandom in JwtCNonceHandler for nonce length generation - use SecureRandom in TimeClaimNormalizer for time claim randomization - introduce centralized secure random utility (SecretGenerator) - ensure uniform and unpredictable randomness in security-sensitive flows Closes #47271 Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com> Address review comments from @IngridPuppet Signed-off-by: Awambeng Rodrick <awambengrodrick@gmail.com> |
||
|---|---|---|
| .. | ||
| src | ||
| pom.xml | ||