MechaCat02 b5f7467c47 refactor: remove unused constant_time_eq and correct the token doc ...

constant_time_eq (and the `subtle` dependency) was never wired into any
comparison — the module doc wrongly claimed token comparison used it, but lookup
is an indexed DB equality on the 256-bit SHA-256 hash, so there's no in-process
secret compare to time-attack. Delete the dead fn, its test, and the unused
`subtle` dep; rewrite the doc. No behaviour change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-13 20:22:39 +02:00

107 KiB

Raw Blame History

View Raw