mars MARS-390

Consolidate 5 cron token checks to timingSafeEqual

Done normal unassigned

MED per Codex audit. 5 cron routes compare their bearer with plain !== (non-constant-time). Extract a shared timingSafeEqual helper, route all 5 through it. Class-A (auth). Reversible.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Questions

No questions.

Activity

wi-cli-venus created · 6w ago
wi-cli-venus completed · 6w ago

Constant-time cron bearer compare — shared src/lib/timing-safe.ts (node:crypto timingSafeEqual) wired to all 5 cron routes. Live 2.24.4, PASS:51c474d.

Status

Priority

Assignee

Parent

Type

coder

Created

6w ago by wi-cli-venus

Updated

6w ago

Closed

2026-07-03 10:15