timonrieger 8011adadb6 fix(server): prevent login timing oracle by always running bcrypt ...

Always call compareBcrypt in the login path regardless of whether the
email is registered. When no user is found, a dummy hash is used so the
bcrypt KDF still runs and response latency is constant, making it
impossible to enumerate valid email addresses by measuring response time.

2026-04-30 11:54:00 +02:00

..

bin

fix(server): memory fragmentation (#27027)

2026-03-26 18:21:52 +01:00

src

fix(server): prevent login timing oracle by always running bcrypt

2026-04-30 11:54:00 +02:00

test

refactor(server)!: sanitize error messages to avoid leaking resource and permission details

2026-04-30 11:53:44 +02:00

.gitignore

…

.npmignore

chore: use pnpm for builds (#19752)

2025-08-19 08:55:24 -04:00

.nvmrc

chore(deps): update node.js to v24.15.0 (#28006)

2026-04-21 09:47:32 +00:00

.prettierignore

…

.prettierrc

…

Dockerfile

chore(deps): update base-image to v202604141125 (major) (#27858)

2026-04-16 15:40:40 +00:00

Dockerfile.dev

chore(deps): update base-image to v202604141125 (major) (#27858)

2026-04-16 15:40:40 +00:00

eslint.config.mjs

…

helmet.json

fix: csp quotes (#27592)

2026-04-07 15:54:30 -04:00

mise.toml

feat: mise monorepo tasks (#23691)

2025-11-10 15:55:15 +01:00

nest-cli.json

fix: isolate docker host/container filesystem for node_modules and build output (#21167)

2025-08-24 13:09:45 -05:00

package.json

fix(deps): update typescript-projects (#28132)

2026-04-28 13:18:29 +02:00

tsconfig.build.json

chore: move .tsbuildinfo file to dist folder (#27682)

2026-04-10 16:02:25 +02:00

tsconfig.json

chore: upgrade sql-tools (#27885)

2026-04-21 17:42:27 +00:00