2 Commits

Include renames

Author	SHA1	Message	Date
weishu	37c6bc83d7	chore: migrate to AGPL-3.0-only	2026-01-04 20:45:15 +08:00
4 people	aababe6a57	fix: use timing-safe comparison for CLI API token validation (#9) ... * fix: use timing-safe comparison for CLI API token validation Replace direct string comparison (===) with constant-time comparison using crypto.timingSafeEqual to prevent timing attacks that could leak information about the token character by character. Affected locations: - server/src/web/routes/auth.ts (accessToken validation) - server/src/web/routes/cli.ts (bearer token middleware) - server/src/socket/server.ts (socket.io /cli namespace auth) * Update server/src/utils/crypto.ts Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2025-12-26 17:22:04 +08:00