supabase / supavisor / 27233296123

77%

Build Type

push

github

Committed by web-flow

Commit Message

fix(auth): use secure_compare for credential comparison when require_user = true (#1032)

## What kind of change does this PR introduce?

Nitpicky change to use `secure_compare` when comparing client-fed
credentials. We are already using this in
https://github.com/supabase/supavisor/blob/main/lib/supavisor/client_handler/auth_methods/password.ex#L86,
so it closes the inconsistency as well.

---------

Signed-off-by: Snehil Shah <snehilshah.989@gmail.com>
Co-authored-by: felipe stival <14948182+v0idpwn@users.noreply.github.com>

Coverage Stats

0 of 1 new or added line in 1 file covered. (0.0%)

5 existing lines in 4 files now uncovered.

2540 of 3332 relevant lines covered (76.23%)

55330.17 hits per line