Keysat da1bba2e6b Compare operator key in constant time
resolveIdentity and verifyOperatorKey compared the shared
relay_cloud_operator_key with ===/!==, which short-circuits on the first
differing byte — a timing oracle on a high-value key. Use a
timingSafeEqual-based constantTimeEqual, matching admin-auth.js.
2026-06-13 18:22:00 -05:00
2026-05-11 20:14:50 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:14:50 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
2026-05-11 20:03:27 -05:00
S
Description
No description provided
873 KiB
Languages
JavaScript 58.2%
HTML 23.6%
TypeScript 17%
Shell 0.7%
Makefile 0.3%
Other 0.2%