nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 15:42:48 -05:00
Code Activity

use fixed-time comparison of secrets (#1698)

Browse Source
This commit is contained in:
Kyle Spearrin
2021-11-08 15:55:42 -05:00
committed by GitHub
parent c07794e907
commit 7cc7b84eaf
8 changed files with 18 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/Api/Utilities/ApiHelpers.cs
View File

@ -1,4 +1,5 @@
using Microsoft.AspNetCore.Http;
using Bit.Core.Utilities;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Azure.EventGrid;
using Microsoft.Azure.EventGrid.Models;
@ -48,7 +49,7 @@ namespace Bit.Api.Utilities
{
var queryKey = request.Query["key"];
if (queryKey != EventGridKey)
if (!CoreHelpers.FixedTimeEquals(queryKey, EventGridKey))
{
return new UnauthorizedObjectResult("Authentication failed. Please use a valid key.");
}