Set stronger secret password for managers

And avoid depending on Devise for this.
This commit is contained in:
Maikel Linke
2025-12-12 15:17:57 +11:00
parent d7603755bf
commit 0dabca583f

View File

@@ -4,7 +4,7 @@ module ManagerInvitations
extend ActiveSupport::Concern
def create_new_manager(email, enterprise)
password = Devise.friendly_token
password = SecureRandom.base58(64)
new_user = Spree::User.create(email:, unconfirmed_email: email, password:)
new_user.reset_password_token = Devise.friendly_token
# Same time as used in Devise's lib/devise/models/recoverable.rb.