adam/seahaven-door-unlock-api
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-door-unlock-api.git synced 2026-09-30 07:03:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
seahaven-door-unlock-api/lambda/lockdown
History
Adam Moussa fe04a199de fix: use constant-time auth token comparison (INFRA-21) (#30) 
Replace plain token !== secrets.authToken checks in the unlock and
lockdown handlers with crypto.timingSafeEqual, guarding for unequal
buffer lengths first (timingSafeEqual throws on different lengths).
Prevents timing side-channel leakage of the auth token. Handler
signatures, event shape, and return contract are unchanged.
2026-06-05 17:26:12 -04:00
..
lockdown-handler.ts fix: use constant-time auth token comparison (INFRA-21) (#30) 2026-06-05 17:26:12 -04:00