did-hosting-common 0.10.1

DID Hosting Common, Common methods and structs related to WebVH Content
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

pub mod backend;
pub mod extractor;
pub mod jwt;
pub mod session;

pub use backend::DidHostingSessionStore;
pub use extractor::{AdminAuth, AuthClaims, ServiceAuth};

/// Constant-time byte comparison to prevent timing side-channel attacks.
///
/// Used for challenge values, bearer tokens, and other security-sensitive
/// string comparisons. The length check is not constant-time, but the values
/// being compared (challenges, tokens) have publicly known fixed lengths.
pub fn constant_time_eq(a: &[u8], b: &[u8]) -> bool {
    if a.len() != b.len() {
        return false;
    }
    let mut diff = 0u8;
    for (x, y) in a.iter().zip(b.iter()) {
        diff |= x ^ y;
    }
    diff == 0
}