Avii/Radicale
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #2100 from flesueur/master

Browse Source 
Authentication cache breaks when password changes
This commit is contained in:
Peter Bieringer
2026-04-23 12:32:15 +02:00
committed by GitHub
parent f68c76b29e ab267a2b87
commit c5dbb6decf
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
radicale/auth/__init__.py
View File

@@ -306,6 +306,7 @@ class BaseAuth:
result_from_cache = True result_from_cache = True
else: else:
logger.debug("Login successful cache entry for user+password not matching: '%s'", login) logger.debug("Login successful cache entry for user+password not matching: '%s'", login)
digest = ""
else: else:
# login not found in cache, caculate always to avoid timing attacks # login not found in cache, caculate always to avoid timing attacks
digest = self._cache_digest(login, password, str(time_ns)) digest = self._cache_digest(login, password, str(time_ns))