auth: use constant-time NIP-42 challenge comparison

2026-03-20 02:32:30 +01:00
parent a4ded3c008
commit b22fe98ab0
2 changed files with 11 additions and 1 deletions
--- a/test/parrhesia/auth/challenges_test.exs
+++ b/test/parrhesia/auth/challenges_test.exs
@@ -13,6 +13,7 @@ defmodule Parrhesia.Auth.ChallengesTest do
    assert Challenges.valid?(server, self(), challenge)

    refute Challenges.valid?(server, self(), "wrong")
+    refute Challenges.valid?(server, self(), challenge <> "x")

    assert :ok = Challenges.clear(server, self())
    assert Challenges.current(server, self()) == nil