Closed a-a-hofmann closed 2 years ago
Eventually this should be changed to use constant time string matching instead of the standard short-circuiting one
https://github.com/mp-access/Course-Service/blob/3cf68302b7efd02c175a2f0dd1ec934e714f272a/src/main/java/ch/uzh/ifi/access/config/ApiTokenAuthenticationProvider.java#L71-L74
Eventually this should be changed to use constant time string matching instead of the standard short-circuiting one
https://github.com/mp-access/Course-Service/blob/3cf68302b7efd02c175a2f0dd1ec934e714f272a/src/main/java/ch/uzh/ifi/access/config/ApiTokenAuthenticationProvider.java#L71-L74