MechaCat02 b5f7467c47 refactor: remove unused constant_time_eq and correct the token doc ...

constant_time_eq (and the `subtle` dependency) was never wired into any
comparison — the module doc wrongly claimed token comparison used it, but lookup
is an indexed DB equality on the 256-bit SHA-256 hash, so there's no in-process
secret compare to time-attack. Delete the dead fn, its test, and the unused
`subtle` dep; rewrite the doc. No behaviour change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-13 20:22:39 +02:00

..

extractor.rs

fix: per-IP auth rate limiting instead of one global bucket

2026-07-08 07:07:06 +02:00

mod.rs

feat: harden auth, shutdown, and session bundle (0.35.0)

2026-05-28 20:27:21 +02:00

password.rs

fix: run Argon2 password hashing on the blocking pool

2026-07-07 20:19:14 +02:00

rate_limit.rs

fix: recover the auth rate limiter from a poisoned mutex

2026-07-11 14:02:54 +02:00

token.rs

refactor: remove unused constant_time_eq and correct the token doc

2026-07-13 20:22:39 +02:00