fix(fips): replace md5 with sha256 for 2fa fingerprint

cardoso · cardoso · commit 27c0ed4b2989 · 2026-03-05T11:24:02.000-03:00
diff --git a/apps/meteor/app/2fa/server/code/index.ts b/apps/meteor/app/2fa/server/code/index.ts
@@ -60,7 +60,7 @@ function getFingerprintFromConnection(connection: IMethodConnection): string {
 		clientAddress: connection.clientAddress,
 	});
 
-	return crypto.createHash('md5').update(data).digest('hex');
+	return crypto.createHash('sha256').update(data).digest('hex');
 }
 
 function getRememberDate(from: Date = new Date()): Date | undefined {

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,7 @@ function getFingerprintFromConnection(connection: IMethodConnection): string {`
`60`	`60`	`clientAddress: connection.clientAddress,`
`61`	`61`	`});`
`62`	`62`
`63`		`- return crypto.createHash('md5').update(data).digest('hex');`
	`63`	`+ return crypto.createHash('sha256').update(data).digest('hex');`
`64`	`64`	`}`
`65`	`65`
`66`	`66`	`function getRememberDate(from: Date = new Date()): Date \| undefined {`