Alexis Loskoutoff e93b771ff5 Check a dummy hash when a login names no account ...

Without a password to check, a login for an unknown account skipped bcrypt
and answered far sooner than one with a wrong password, which still told
which emails have an account.

2026-11-05 18:29:52 +01:00

..

access_list_auth.js

Attempt to fix race condition with database instantiation

2025-11-07 09:46:00 +10:00

access_list_client.js

Attempt to fix race condition with database instantiation

2025-11-07 09:46:00 +10:00

access_list.js

Adds integration tests for per path access lists, fixes ipv6 jsv,

2026-09-24 12:21:49 +10:00

audit-log.js

Attempt to fix race condition with database instantiation

2025-11-07 09:46:00 +10:00

auth.js

Check a dummy hash when a login names no account

2026-11-05 18:29:52 +01:00

certificate.js

Fix regression of null domains in db creates

2026-05-29 07:32:58 +10:00

dead_host.js

Regenerate configs improvements

2026-03-03 08:44:42 +10:00

now_helper.js

Attempt to fix race condition with database instantiation

2025-11-07 09:46:00 +10:00

proxy_host.js

Regenerate configs improvements

2026-03-03 08:44:42 +10:00

redirection_host.js

Regenerate configs improvements

2026-03-03 08:44:42 +10:00

setting.js

Updated backend packages

2026-08-22 23:10:26 +10:00

stream.js

Regenerate configs improvements

2026-03-03 08:44:42 +10:00

token.js

Biome update

2025-10-02 08:12:24 +10:00

user_permission.js

feat: rate limit auth endpoints and scope user proxy host permissions

2026-11-05 12:16:36 +05:00

user.js

Attempt to fix race condition with database instantiation

2025-11-07 09:46:00 +10:00