mika/rogueserver
1
0
Fork 0
mirror of https://github.com/pagefaultgames/rogueserver.git synced 2025-12-22 17:49:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge 41293d4fc5 into 89aa5cd6e0

Browse Source
This commit is contained in:
Elouan Martinet 2025-11-21 13:28:25 +01:00 committed by GitHub
commit 09509ee716
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
api/account/login.go
View File

@ -18,8 +18,8 @@
package account
import (
"bytes"
"crypto/rand"
"crypto/subtle"
"database/sql"
"encoding/base64"
"errors"
@ -54,7 +54,7 @@ func Login[T LoginStore](store T, username, password string) (LoginResponse, err
return response, err
}
if !bytes.Equal(key, deriveArgon2IDKey([]byte(password), salt)) {
if subtle.ConstantTimeCompare(key, deriveArgon2IDKey([]byte(password), salt)) == 0 {
return response, fmt.Errorf("password doesn't match")
}