maximus

0 followers · 0 following

• Joined on 2026-02-23

Repositories

3

Projects Packages Public activity Starred repositories

maximus created branch issue-24-forgejo-ci in maximus/vps-health-api 2026-09-28 00:22:50 +00:00

maximus pushed to issue-24-forgejo-ci at maximus/vps-health-api 2026-09-28 00:22:50 +00:00

4e7879da6c ci: add a Forgejo Actions workflow with a boot-from-COPY check (#24)

maximus deleted branch defenseur-auto/92e1028b06-1790056806467 from maximus/simpl-liste 2026-09-27 23:59:31 +00:00

maximus deleted branch defenseur-auto/1263935930-1789970587808 from maximus/simpl-liste 2026-09-27 23:59:31 +00:00

maximus deleted branch defenseur-auto/555fcee5a0-1789711205793 from maximus/simpl-liste 2026-09-27 23:59:31 +00:00

maximus deleted branch defenseur-auto/30291955a1-1788502055127 from maximus/simpl-liste 2026-09-27 23:59:31 +00:00

maximus pushed to main at maximus/vps-health-api 2026-09-27 23:27:46 +00:00

2b35b78a0b Merge pull request 'fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches' (#30) from issue-17-timing-safe-health-token into main

f006a1c05e test(auth): pin the single space after the Bearer scheme

5074f95d0a test(auth): guard tokenMatches itself and close the pin's blind spots

f70a7e928f fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

Compare 4 commits »

maximus deleted branch issue-17-timing-safe-health-token from maximus/vps-health-api 2026-09-27 23:27:46 +00:00

maximus merged pull request maximus/vps-health-api#30 2026-09-27 23:27:45 +00:00

fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

maximus closed issue maximus/vps-health-api#17 2026-09-27 23:27:45 +00:00

Durcir la comparaison du HEALTH_TOKEN (timing-safe)

maximus commented on pull request maximus/vps-health-api#30 2026-09-27 23:25:00 +00:00

fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

Review — APPROVE

Summary: checkAuth() now funnels both token kinds through a single tokenMatches() call (SHA-256 digests, then timingSafeEqual), which removes the early-exit ===…

maximus pushed to issue-17-timing-safe-health-token at maximus/vps-health-api 2026-09-27 23:23:53 +00:00

f006a1c05e test(auth): pin the single space after the Bearer scheme

maximus closed issue maximus/Simpl-Resultat#361 2026-09-27 20:21:51 +00:00

test: clé de licence dont l’exp dépasse 2^32 (licences de 100 ans)

maximus commented on issue maximus/Simpl-Resultat#361 2026-09-27 20:21:50 +00:00

test: clé de licence dont l’exp dépasse 2^32 (licences de 100 ans)

Doublon de #363, créée huit minutes plus tard avec le même titre et un corps plus complet (coordination du skill /issue-license). Fermée ici, le suivi se fait dans #363.

maximus commented on pull request maximus/vps-health-api#30 2026-09-27 20:15:02 +00:00

fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

Review — APPROVE (head 5074f95)

Summary: checkAuth() has a single comparison path for both token kinds: the Bearer scheme check, then tokenMatches() on SHA-256 digests. The…

maximus pushed to issue-17-timing-safe-health-token at maximus/vps-health-api 2026-09-27 20:13:18 +00:00

5074f95d0a test(auth): guard tokenMatches itself and close the pin's blind spots

maximus commented on pull request maximus/vps-health-api#30 2026-09-27 20:13:17 +00:00

fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

Follow-up to review 16536 (commit on top of f70a7e9).

1. tokenMatches() now guarded. Behavioural: spy on crypto.timingSafeEqual (set before a fresh require, since index.js destructures at…

maximus commented on pull request maximus/vps-health-api#30 2026-09-27 20:08:38 +00:00

fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

Review — APPROVE

Summary: The fix is correct and minimal. checkAuth() now has a single comparison for both token kinds (Bearer scheme check, then tokenMatches() on SHA-256…

maximus created pull request maximus/vps-health-api#30 2026-09-27 20:06:19 +00:00

fix(auth): compare HEALTH_TOKEN in constant time via tokenMatches

maximus created branch issue-17-timing-safe-health-token in maximus/vps-health-api 2026-09-27 20:06:07 +00:00