mirrors/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-04-04 13:47:37 +03:00
Code Issues Projects Releases Packages Wiki Activity

remove obsolete code and comment as constant execution time is now done by __init__.py

Browse source
This commit is contained in:
Peter Bieringer 2025-01-03 07:02:29 +01:00
parent 0d43a49ffb
commit cf914450ee
1 changed files with 0 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
radicale/auth/htpasswd.py
View file

@ -252,13 +252,6 @@ class Auth(auth.BaseAuth):
Optional: the content of the file is cached and live updates will be detected by Optional: the content of the file is cached and live updates will be detected by
comparing mtime_ns and size comparing mtime_ns and size
TODO: improve against timing attacks
see also issue 591
but also do not delay that much
see also issue 1466
As several hash methods are supported which have different speed a time based gap would be required
""" """
login_ok = False login_ok = False
digest: str digest: str
@ -299,7 +292,5 @@ class Auth(auth.BaseAuth):
else: else:
logger.debug("Login verification failed for user: '%s' ( method '%s')", login, method) logger.debug("Login verification failed for user: '%s' ( method '%s')", login, method)
else: else:
# dummy delay
(method, password_ok) = self._plain(str(time.time_ns()), password)
logger.debug("Login verification user not found: '%s'", login) logger.debug("Login verification user not found: '%s'", login)
return "" return ""