Torbjørn Lindahl 7dae8faf62 security: fix timing attack vulnerability and incorrect method call ...

- Use secrets.compare_digest() for token comparison instead of == to
  prevent timing-based attacks that could leak token information
- Fix rotate_session_auth_token() to call the correct method
  rotate_session_token() instead of non-existent rotate_session_auth_token()

2026-02-05 00:36:07 +01:00

..

routes

feat: add comprehensive OpenCode API endpoint proxies

2026-02-05 00:33:58 +01:00

app.py

fix: session stability improvements

2026-02-04 19:10:03 +01:00

async_docker_client.py

fix: add missing _get_container_info method to AsyncDockerClient

2026-02-04 22:04:29 +01:00

config.py

refactored the big main.py file

2026-02-03 00:17:26 +01:00

container_health.py

fix: session stability improvements

2026-02-04 19:10:03 +01:00

database.py

fixed all remaining issues with the session manager

2026-01-18 23:28:49 +01:00

docker_service.py

fixed all remaining issues with the session manager

2026-01-18 23:28:49 +01:00

Dockerfile

debuged python docker client issue

2026-01-18 20:01:23 +01:00

host_ip_detector.py

fixed all remaining issues with the session manager

2026-01-18 23:28:49 +01:00

http_pool.py

fixed all remaining issues with the session manager

2026-01-18 23:28:49 +01:00

logging_config.py

wp on webui

2026-02-02 23:37:11 +01:00

main.py

refactored the big main.py file

2026-02-03 00:17:26 +01:00

models.py

refactored the big main.py file

2026-02-03 00:17:26 +01:00

requirements.txt

wp on webui

2026-02-02 23:37:11 +01:00

resource_manager.py

fixed all remaining issues with the session manager

2026-01-18 23:28:49 +01:00

session_auth.py

security: fix timing attack vulnerability and incorrect method call

2026-02-05 00:36:07 +01:00

session_manager.py

fix: session stability improvements

2026-02-04 19:10:03 +01:00