qcc/internal
Niko Marmeladkov 4f6310c2bb
Fix PoW auth bypass: verify against issued challenge, not new one
Store challenge from handleGetChallenge in session, then verify
against it in handleSolve. Previously a fresh challenge was
generated for verification, making auth trivially bypassable.
2026-06-30 13:47:17 +03:00
..
auth Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
ca Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
call Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
config Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
congestion Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
crypto Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
identity Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
protocol Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
server Fix PoW auth bypass: verify against issued challenge, not new one 2026-06-30 13:47:17 +03:00
store Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
transport Fix missing ALPN NextProtos for QUIC handshake 2026-06-30 13:43:54 +03:00