auth_cache: empty digest when cache miss

2026-04-23 09:20:49 +02:00
parent 4eb0935efe
commit ab267a2b87
1 changed files with 1 additions and 0 deletions
--- a/radicale/auth/init.py
+++ b/radicale/auth/init.py
@@ -306,6 +306,7 @@ class BaseAuth:
                        result_from_cache = True
                else:
                    logger.debug("Login successful cache entry for user+password not matching: '%s'", login)
+                    digest = ""
            else:
                # login not found in cache, caculate always to avoid timing attacks
                digest = self._cache_digest(login, password, str(time_ns))