From 594c477d7306d7ae190461f9945d9d2a72cc88f0 Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Thu, 2 Apr 2026 13:09:58 +0200 Subject: [PATCH] delay: do not apply on PYTEST --- radicale/app/__init__.py | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/radicale/app/__init__.py b/radicale/app/__init__.py index 0dcd510d..bb6d1b9d 100644 --- a/radicale/app/__init__.py +++ b/radicale/app/__init__.py @@ -499,8 +499,15 @@ class Application(ApplicationPartDelete, ApplicationPartHead, remote_host, login, info) # Random delay to avoid timing oracles and bruteforce attacks if self._auth_delay > 0: - random_delay = self._auth_delay * (0.5 + random.random()) - logger.debug("Failed login, sleeping random: %.3f sec", random_delay) + if 'PYTEST_VERSION' in os.environ: + # no random during tests + random_delay = self._auth_delay + if logger.isEnabledFor(logging.DEBUG): + logger.debug("Failed login, sleeping fixed(pytest): %.3f sec", random_delay) + else: + random_delay = self._auth_delay * (0.5 + random.random()) + if logger.isEnabledFor(logging.DEBUG): + logger.debug("Failed login, sleeping random: %.3f sec", random_delay) time.sleep(random_delay) if user and not pathutils.is_safe_path_component(user):