obsidian-plugin/taskgenius_taskgenius-plugin
1
0
Fork 0
mirror of https://github.com/taskgenius/taskgenius-plugin.git synced 2026-07-22 06:40:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge 7abfcd478d into 16c778bc8d

Browse source
This commit is contained in:
Spidershield-contrib 2026-07-07 00:50:58 +04:00 committed by GitHub
commit 4739107329
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
src/mcp/auth/AuthMiddleware.ts
View file

@ -3,6 +3,17 @@
*/
import { IncomingMessage, ServerResponse } from "http";
import { timingSafeEqual, createHash } from "crypto";
function safeEqual(a: string, b: string): boolean {
try {
const hashA = createHash("sha256").update(a).digest();
const hashB = createHash("sha256").update(b).digest();
return timingSafeEqual(hashA, hashB);
} catch {
return false;
}
}
export class AuthMiddleware {
constructor(private authToken: string) {}
@ -19,7 +30,7 @@ export class AuthMiddleware {
if (!parsed) {
return false;
}
return parsed.token === this.authToken;
return safeEqual(parsed.token, this.authToken);
}
/**