switch to cryptographically-secure source

snowflakedb · Jan 16, 2025 · 6d025e5 · 6d025e5
1 parent 8fde1fc
commit 6d025e5
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/snowflake/connector/auth/oauth_code.py b/src/snowflake/connector/auth/oauth_code.py
@@ -6,9 +6,8 @@
 
 import json
 import logging
-import random
+import secrets
 import socket
-import string
 import time
 import urllib.parse
 import webbrowser
@@ -71,7 +70,7 @@ def __init__(
         self.token_request_url = token_request_url
         self.redirect_uri = redirect_uri
         self.scope = scope
-        self._state = "".join(random.choices(string.ascii_letters, k=10))
+        self._state = secrets.token_urlsafe(43)
         logger.debug("chose oauth state: %s", self._state)
         self._oauth_token = None
         self._protocol = "http"