1 files changed, 11 insertions, 0 deletions
diff --git a/app/models/group.rb b/app/models/group.rb
index 8fb77a7869d..127668bfbe1 100644
--- a/app/models/group.rb
+++ b/app/models/group.rb
@@ -334,6 +334,17 @@ class Group < Namespace
     ensure_runners_token!
   end
 
+  # Helps avoid revealing that a group exists on a given path
+  # The token conveys that the anonymous user is allowed to know of the group
+  def discovery_token
+    super.presence || begin
+      self.discovery_token = Devise.friendly_token(8)
+
+      save if Gitlab::Database.read_write?
+      super
+    end
+  end
+
   private
 
   def update_two_factor_requirement