Use random string for securing socketIO pn iOS

TryQuiet · Oct 17, 2023 · 140801b · 140801b
1 parent 8f476a2
commit 140801b
Showing 1 changed file with 14 additions and 1 deletion.
diff --git a/packages/mobile/ios/Quiet/AppDelegate.m b/packages/mobile/ios/Quiet/AppDelegate.m
@@ -95,6 +95,19 @@ - (void) createDataDirectory {
   self.dataPath = [dataDirectory create];
 }
 
+  NSString* randomStringWithLength(int length) {
+    NSString *letters = @"0123456789";
+    NSMutableString *randomString = [NSMutableString stringWithCapacity:length];
+
+    for (int i=0; i<length; i++) {
+      uint32_t rand = arc4random_uniform((uint32_t)[letters length]);
+      unichar character = [letters characterAtIndex:rand];
+      [randomString appendFormat:@"%C", character];
+    }
+
+    return randomString;
+  }
+
 - (void) initWebsocketConnection {
   /*
    * We have to wait for RCTBridge listeners to be initialized, yet we must be sure to deliver the event containing data port information.
@@ -116,7 +129,7 @@ - (void) spinupBackend:(BOOL)init {
   FindFreePort *findFreePort = [FindFreePort new];
 
   self.dataPort             = [findFreePort getFirstStartingFromPort:11000];
-  self.socketIOSecret       = @"SECRET";
+  self.socketIOSecret       = randomStringWithLength(20);
 
   uint16_t socksPort        = [findFreePort getFirstStartingFromPort:12000];
   uint16_t controlPort      = [findFreePort getFirstStartingFromPort:14000];