Merge pull request 'fix: use constant-time comparison for bearer token validation (#8)' (#56) from ai/paper-dynasty-database#8 into next-release
Reviewed-on: #56
This commit is contained in:
commit
9711f63da5
@ -1,4 +1,5 @@
|
|||||||
import datetime
|
import datetime
|
||||||
|
import hmac
|
||||||
import logging
|
import logging
|
||||||
import os
|
import os
|
||||||
|
|
||||||
@ -24,7 +25,7 @@ if os.environ.get("TESTING") == "True":
|
|||||||
|
|
||||||
|
|
||||||
def valid_token(token):
|
def valid_token(token):
|
||||||
return token == AUTH_TOKEN
|
return hmac.compare_digest(token, AUTH_TOKEN)
|
||||||
|
|
||||||
|
|
||||||
def int_timestamp(datetime_obj: datetime) -> int:
|
def int_timestamp(datetime_obj: datetime) -> int:
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user