From 70000c93e280b907da1ab0839e9a014ada06ad0f Mon Sep 17 00:00:00 2001
From: Infendro <infendro@noreply.infendro.com>
Date: Thu, 24 Jul 2025 21:15:45 +0200
Subject: [PATCH] update dependencies

---
 backend/build.gradle.kts                                  | 7 +++++++
 backend/gradle/libs.versions.toml                         | 8 +++++---
 backend/src/main/kotlin/com/infendro/account/util/OTP.kt  | 2 --
 .../main/kotlin/com/infendro/account/util/SecureHasher.kt | 4 ++--
 .../kotlin/com/infendro/account/util/TokenGenerator.kt    | 5 ++---
 5 files changed, 16 insertions(+), 10 deletions(-)

diff --git a/backend/build.gradle.kts b/backend/build.gradle.kts
index 85f2b08..984500f 100644
--- a/backend/build.gradle.kts
+++ b/backend/build.gradle.kts
@@ -34,9 +34,16 @@ dependencies {
     implementation(libs.flyway.postgres)
     implementation(libs.koin)
     implementation(libs.koin.logger)
+    implementation(libs.random)
     implementation(libs.otp)
     implementation(libs.kdf)
     implementation(libs.hash)
     implementation(libs.encoding)
     implementation(libs.logback)
 }
+
+kotlin {
+    compilerOptions {
+        freeCompilerArgs.add("-opt-in=kotlin.time.ExperimentalTime")
+    }
+}
diff --git a/backend/gradle/libs.versions.toml b/backend/gradle/libs.versions.toml
index d74b70b..5963c33 100644
--- a/backend/gradle/libs.versions.toml
+++ b/backend/gradle/libs.versions.toml
@@ -5,9 +5,10 @@ exposed = "0.60.0"
 postgres = "42.7.5"
 flyway = "11.7.0"
 koin = "4.0.3"
-otp = "1.1.0"
-kdf = "1.0.0"
-hash = "1.1.0"
+random = "1.0.0"
+otp = "1.1.1"
+kdf = "1.0.1"
+hash = "1.2.2"
 encoding = "1.1.0"
 logback = "1.5.18"
 
@@ -37,6 +38,7 @@ flyway-postgres = { module = "org.flywaydb:flyway-database-postgresql", version.
 koin = { module = "io.insert-koin:koin-ktor", version.ref = "koin" }
 koin-logger = { module = "io.insert-koin:koin-logger-slf4j", version.ref = "koin" }
 
+random = { module = "com.infendro:random", version.ref = "random" }
 otp = { module = "com.infendro:otp", version.ref = "otp" }
 kdf = { module = "com.infendro:kdf", version.ref = "kdf" }
 hash = { module = "com.infendro:hash", version.ref = "hash" }
diff --git a/backend/src/main/kotlin/com/infendro/account/util/OTP.kt b/backend/src/main/kotlin/com/infendro/account/util/OTP.kt
index 49c9d57..0d38f24 100644
--- a/backend/src/main/kotlin/com/infendro/account/util/OTP.kt
+++ b/backend/src/main/kotlin/com/infendro/account/util/OTP.kt
@@ -6,9 +6,7 @@ import com.infendro.otp.SecretGenerator
 import com.infendro.otp.TOTP
 import kotlin.time.Clock
 import kotlin.time.Duration.Companion.seconds
-import kotlin.time.ExperimentalTime
 
-@OptIn(ExperimentalTime::class)
 object OTP {
     private val totp = TOTP(
         function = SHA256,
diff --git a/backend/src/main/kotlin/com/infendro/account/util/SecureHasher.kt b/backend/src/main/kotlin/com/infendro/account/util/SecureHasher.kt
index c61c9d4..0e68216 100644
--- a/backend/src/main/kotlin/com/infendro/account/util/SecureHasher.kt
+++ b/backend/src/main/kotlin/com/infendro/account/util/SecureHasher.kt
@@ -3,11 +3,11 @@ package com.infendro.account.util
 import com.infendro.encoding.Hex
 import com.infendro.hash.SHA256
 import com.infendro.kdf.PBKDF2
-import kotlin.random.Random
+import com.infendro.random.PRNG
 
 object SecureHasher {
     private val kdf = PBKDF2(SHA256)
-    private val random = Random.Default
+    private val random = PRNG.HMAC
 
     fun hash(
         value: String,
diff --git a/backend/src/main/kotlin/com/infendro/account/util/TokenGenerator.kt b/backend/src/main/kotlin/com/infendro/account/util/TokenGenerator.kt
index 01302da..e0f6008 100644
--- a/backend/src/main/kotlin/com/infendro/account/util/TokenGenerator.kt
+++ b/backend/src/main/kotlin/com/infendro/account/util/TokenGenerator.kt
@@ -1,11 +1,10 @@
 package com.infendro.account.util
 
 import com.infendro.encoding.Hex
-import kotlin.random.Random
+import com.infendro.random.PRNG
 
-// TODO implement secure random
 object TokenGenerator {
-    private val random = Random.Default
+    private val random = PRNG.HMAC
 
     fun generate(): String {
         val bytes = ByteArray(32)