From 519a84457ed0fe8499ddca16b52ed65560eeb5d8 Mon Sep 17 00:00:00 2001 From: nagendra0721 Date: Fri, 12 Jun 2026 12:38:32 +0530 Subject: [PATCH] #575: fix double hashing issue Signed-off-by: nagendra0721 --- .../kernel/tokenidgenerator/generator/TokenIDGenerator.java | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/kernel/kernel-keymanager-service/src/main/java/io/mosip/kernel/tokenidgenerator/generator/TokenIDGenerator.java b/kernel/kernel-keymanager-service/src/main/java/io/mosip/kernel/tokenidgenerator/generator/TokenIDGenerator.java index c73c84f5..8ee7f849 100644 --- a/kernel/kernel-keymanager-service/src/main/java/io/mosip/kernel/tokenidgenerator/generator/TokenIDGenerator.java +++ b/kernel/kernel-keymanager-service/src/main/java/io/mosip/kernel/tokenidgenerator/generator/TokenIDGenerator.java @@ -1,6 +1,7 @@ package io.mosip.kernel.tokenidgenerator.generator; import java.math.BigInteger; +import java.nio.charset.StandardCharsets; import io.mosip.kernel.core.logger.spi.Logger; import io.mosip.kernel.core.util.HMACUtils2; @@ -25,8 +26,8 @@ public class TokenIDGenerator { public String generateTokenID(String uin, String partnerCode) { try { - String uinHash = HMACUtils2.digestAsPlainText(HMACUtils2.generateHash((uin + uinSalt).getBytes())); - String hash = HMACUtils2.digestAsPlainText(HMACUtils2.generateHash((partnerCodeSalt + partnerCode + uinHash).getBytes())); + String uinHash = HMACUtils2.digestAsPlainText((uin + uinSalt).getBytes(StandardCharsets.UTF_8)); + String hash = HMACUtils2.digestAsPlainText((partnerCodeSalt + partnerCode + uinHash).getBytes(StandardCharsets.UTF_8)); return new BigInteger(hash.getBytes()).toString().substring(0, tokenIDLength); } catch (java.security.NoSuchAlgorithmException e) { LOGGER.error("Error generating token ID: No such algorithm found", e);