Squash 1420

.talismanrc

@@ -14,7 +14,7 @@ fileignoreconfig:
 - filename: app/constants.py
   checksum: 44390d0a1258b184cf84dc9b6e97bd0768af84a9aa346ba963aa7735fc8bcb36
 - filename: app/dao/api_key_dao.py
-  checksum: ab93313f306c8a3f6576141e8f32d9fc99b0de7da8d44a1ddbe6ea55d167dcdb
+  checksum: c44cbd8ae02fb1d551a1f0941365c11977564a6444950ee2b0282ee4b5fd1314
 - filename: app/letters/utils.py
   checksum: 5e6071b9cab380f9f3ee172f8c731061241200f53453a9863f22bb5eaa05e6af
 - filename: app/notifications/process_notifications.py

app/dao/api_key_dao.py

@@ -1,12 +1,12 @@
+import secrets
 import uuid
 from datetime import datetime, timedelta
 
-from app import db
-from app.models import ApiKey
+from sqlalchemy import func, or_, select
 
+from app import db
 from app.dao.dao_utils import transactional, version_class
-
-from sqlalchemy import or_, func, select
+from app.models import ApiKey
 
 
 @transactional
@@ -15,7 +15,7 @@ def save_model_api_key(api_key):
     if not api_key.id:
         api_key.id = uuid.uuid4()  # must be set now so version history model can use same id
     if not api_key.secret:
-        api_key.secret = uuid.uuid4()
+        api_key.secret = secrets.token_urlsafe(64)
     db.session.add(api_key)