From ab267a2b87ef92675668b0edd8ebe74024feb77f Mon Sep 17 00:00:00 2001 From: Francois Lesueur Date: Thu, 23 Apr 2026 09:20:49 +0200 Subject: [PATCH] auth_cache: empty digest when cache miss --- radicale/auth/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/radicale/auth/__init__.py b/radicale/auth/__init__.py index fb9a0c40..7a79d246 100644 --- a/radicale/auth/__init__.py +++ b/radicale/auth/__init__.py @@ -306,6 +306,7 @@ class BaseAuth: result_from_cache = True else: logger.debug("Login successful cache entry for user+password not matching: '%s'", login) + digest = "" else: # login not found in cache, caculate always to avoid timing attacks digest = self._cache_digest(login, password, str(time_ns))