Security: backport #737 to the v0.8.x branch #740

Merged
lx merged 2 commits from backport-737-0.8.x into main-0.8.x 2024-03-01 11:16:41 +00:00

2 commits

Author SHA1 Message Date
70899b0e37
[fix-auth-ct-eq] use consant time comparison for awsv4 signature verification
All checks were successful
ci/woodpecker/pr/debug Pipeline was successful
ci/woodpecker/push/debug Pipeline was successful
2024-02-29 18:13:41 +01:00
c00a028cc8
[fix-auth-ct-eq] use argon2 hashing and verification for admin/metrics token checking 2024-02-29 18:13:37 +01:00