Marc-André Bombeck 78de978dcd fix(recovery): check a pasted token key against its slow fingerprint ...

The kit's check compared keyed SHA-256 digests of the pasted value and the
configured key, which code scanning still reads as a fast hash of a
password. It now compares the scrypt fingerprints in constant time.

2026-10-25 19:58:40 +01:00

..

__tests__

fix(recovery): fingerprint a chosen secret with scrypt, not a fast hash

2026-10-25 19:09:27 +01:00

backup-key-needs.ts

fix(recovery): the database dumps count in the keys the backups still need

2026-10-25 17:20:16 +01:00

database-dump-health.ts

Merge the release into the backup health work and read the real dump health

2026-10-25 14:40:31 +01:00

kit-rules.ts

fix(recovery): fingerprint a chosen secret with scrypt, not a fast hash

2026-10-25 19:09:27 +01:00

kit.ts

fix(recovery): check a pasted token key against its slow fingerprint

2026-10-25 19:58:40 +01:00

readiness-model.ts

fix(restore-drill): a drill that read nothing back is no pass

2026-10-25 17:26:40 +01:00

readiness-notify.ts

feat(admin): judge every backup signal and push changes to admins

2026-10-25 13:32:43 +01:00

readiness.ts

fix(recovery): readiness leaves accounts pending deletion out

2026-10-25 17:03:10 +01:00