veb.auth: use constant time compare

vlang / v

Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io

MIT License

35.5k stars 2.15k forks source link

veb.auth: use constant time compare #21693

Closed Le0Developer closed 1 week ago

Le0Developer commented 1 week ago

also added small section about security considerations

spytheman commented 1 week ago

There is no compare_digest function. The CI fails because of it.