fix: use constant-time comparison for bearer token validation (#8) #56

Merged
cal merged 1 commits from ai/paper-dynasty-database#8 into next-release 2026-03-05 03:44:14 +00:00

View File

@ -1,4 +1,5 @@
import datetime
import hmac
import logging
import os
@ -24,7 +25,7 @@ if os.environ.get("TESTING") == "True":
def valid_token(token):
return token == AUTH_TOKEN
return hmac.compare_digest(token, AUTH_TOKEN)
def int_timestamp(datetime_obj: datetime) -> int: