qcc/internal/server
Niko Marmeladkov 4f6310c2bb
Fix PoW auth bypass: verify against issued challenge, not new one
Store challenge from handleGetChallenge in session, then verify
against it in handleSolve. Previously a fresh challenge was
generated for verification, making auth trivially bypassable.
2026-06-30 13:47:17 +03:00
..
bandwidth.go Initial commit: QuiC Call server 2026-06-30 12:52:09 +03:00
server.go Fix PoW auth bypass: verify against issued challenge, not new one 2026-06-30 13:47:17 +03:00
session.go Fix PoW auth bypass: verify against issued challenge, not new one 2026-06-30 13:47:17 +03:00