mirror/rogueserver
1
0
Fork 0
mirror of https://github.com/pagefaultgames/rogueserver.git synced 2025-09-14 03:10:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge 41293d4fc592ef51f7b36f41827a3ba20c905727 into e11eaec05a5d538b113509d142e7b6f375bdf128

Browse Source
This commit is contained in:
Elouan Martinet 2025-08-16 11:02:34 +00:00 committed by GitHub
commit 5241753ce5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
api/account/login.go
View File

@ -18,8 +18,8 @@
package account package account
import ( import (
"bytes"
"crypto/rand" "crypto/rand"
"crypto/subtle"
"database/sql" "database/sql"
"encoding/base64" "encoding/base64"
"errors" "errors"
@ -51,7 +51,7 @@ func Login(username, password string) (LoginResponse, error) {
return response, err return response, err
} }
if !bytes.Equal(key, deriveArgon2IDKey([]byte(password), salt)) { if subtle.ConstantTimeCompare(key, deriveArgon2IDKey([]byte(password), salt)) == 0 {
return response, fmt.Errorf("password doesn't match") return response, fmt.Errorf("password doesn't match")
} }