fix: use explicit OS entropy for assistant and wallet IDs

2026-10-09 08:56:29 -04:00
parent 088eee55b8
commit e2d926f5e0
3 changed files with 5 additions and 4 deletions
@@ -30,7 +30,7 @@ pub const TOKEN_LEN: usize = 8;
 /// wrapped. Called exactly once per [`UntrustedBlock::new`] /
 /// [`wrap_untrusted`] invocation.
 fn fresh_token() -> String {
-    rand::thread_rng()
+    rand::rngs::OsRng
        .sample_iter(Alphanumeric)
        .take(TOKEN_LEN)
        .map(char::from)