Merge pull request #2100 from flesueur/master

Authentication cache breaks when password changes
2026-04-23 12:32:15 +02:00
parent f68c76b29e ab267a2b87
commit c5dbb6decf
1 changed files with 1 additions and 0 deletions
--- a/radicale/auth/init.py
+++ b/radicale/auth/init.py
@@ -306,6 +306,7 @@ class BaseAuth:
                        result_from_cache = True
                else:
                    logger.debug("Login successful cache entry for user+password not matching: '%s'", login)
+                    digest = ""
            else:
                # login not found in cache, caculate always to avoid timing attacks
                digest = self._cache_digest(login, password, str(time_ns))