fix(user): equalise login timing for unknown emails #32

Merged

nalum merged 1 commit from fix/login-timing-oracle into main

2026-08-13 11:40:10 +00:00

nalum commented

2026-08-13 10:28:04 +00:00

Owner

Stacked on #29 (fix/login-lockout).

An unknown email returned before any bcrypt compare ran, so timing distinguished registered addresses from unknown ones (~100x) on the anonymous Login surface, despite the uniform response body.

The not-found and closed-account paths now burn the same bcrypt cost against a fixed cost-10 dummy hash before refusing. The lock/gap refusals keep their deliberate no-compare design from #29 (they reveal lock state only to someone who already proved the account exists by triggering misses). A test pins the dummy hash as valid bcrypt at bcrypt.DefaultCost — a malformed literal would silently reopen the oracle.

Fixes #15

🤖 Generated with Claude Code

Stacked on #29 (`fix/login-lockout`). An unknown email returned before any bcrypt compare ran, so timing distinguished registered addresses from unknown ones (~100x) on the anonymous Login surface, despite the uniform response body. The not-found and closed-account paths now burn the same bcrypt cost against a fixed cost-10 dummy hash before refusing. The lock/gap refusals keep their deliberate no-compare design from #29 (they reveal lock state only to someone who already proved the account exists by triggering misses). A test pins the dummy hash as valid bcrypt at `bcrypt.DefaultCost` — a malformed literal would silently reopen the oracle. Fixes #15 🤖 Generated with [Claude Code](https://claude.com/claude-code)

nalum added 1 commit

2026-08-13 10:28:04 +00:00

fix(user): equalise login timing for unknown emails

check / web (push) Successful in 1m32s

Details

check / go (push) Successful in 1m49s

Details

94c8c7a826

An unknown email returned before the bcrypt compare ran, so timing
distinguished registered addresses from unknown ones on the anonymous
Login surface (~100x faster). The miss path now burns the same bcrypt
cost against a fixed dummy hash before refusing, closing the
enumeration oracle while keeping the uniform response body.

Fixes #15

nalum referenced this pull request

2026-08-13 10:43:55 +00:00

feat(audit): record security events in the audit log #34

nalum force-pushed fix/login-timing-oracle from 94c8c7a826

check / web (push) Successful in 1m32s

Details

check / go (push) Successful in 1m49s

Details

to e66b37aa10

tag / tag (push) Has been cancelled

Details

check / go (push) Successful in 1m49s