.gitignore

@@ -28,6 +28,5 @@ instance
 
 .DS_Store
 .idea
-.scannerwork
 
 excludes

src/flask_digest_auth/auth.py

@@ -24,7 +24,8 @@ from __future__ import annotations
 import sys
 import typing as t
 from functools import wraps
-from secrets import token_urlsafe, randbits
+from random import random
+from secrets import token_urlsafe
 
 from flask import g, request, Response, session, abort, Flask, Request
 from itsdangerous import URLSafeTimedSerializer, BadData
@@ -205,10 +206,9 @@ class DigestAuth:
         """
         opaque: t.Optional[str] = None if not self.use_opaque else \
             (state.opaque if state.opaque is not None
-             else self.serializer.dumps(randbits(32), salt="opaque"))
+             else self.serializer.dumps(random(), salt="opaque"))
         nonce: str = self.serializer.dumps(
-            randbits(32),
+            random(), salt="nonce" if opaque is None else f"nonce-{opaque}")
-            salt="nonce" if opaque is None else f"nonce-{opaque}")
 
         header: str = f"Digest realm=\"{self.realm}\""
         if len(self.domain) > 0: