Jiyuan Zheng
Results
3
issues of
Jiyuan Zheng
Since we use a default PHC string to make the verifying time-constant, the actual `Unknown Username` case will be early returned as `Invalid password`. ```rust spawn_blocking_with_tracing(move || { verify_password_hash(expected_password_hash, credentials.password)...
*Issue* #253 *Description of changes:* Fix early return caused by `unknown username` in `validate_credentials` By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this...