fix(all): several security fixes

AnsonDev42 / balance-checker-bot

Check your balance in Monzo Bank before your direct debit day

GNU General Public License v3.0

2 stars 0 forks source link

Closed AnsonDev42 closed 9 months ago

AnsonDev42 commented 9 months ago

bot talk to server by sending auth token via request header instead of query parameter
server verify bot's token using secrets.compare_digest to prevent timing attacks