vh/rest-server
1
0
Fork 0
mirror of https://github.com/restic/rest-server.git synced 2026-09-26 05:51:24 -07:00
Code Issues Actions Packages Projects Releases Wiki Activity

Try to zero htpasswd cache entries before deletion

Browse Source
This commit is contained in:
Michael Eischer
2022-06-21 00:18:05 +02:00
committed by Leo R. Lundgren
parent 0bdc420e75
commit 1eeca53812
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
htpasswd.go
+9
View File
@@ -120,8 +120,11 @@ func (h *HtpasswdFile) expiryTimer() {
time.Sleep(5 * time.Second) time.Sleep(5 * time.Second)
now := time.Now() now := time.Now()
h.mutex.Lock() h.mutex.Lock()
var zeros [sha256.Size]byte
// try to wipe expired cache entries
for user, entry := range h.cache { for user, entry := range h.cache {
if entry.expiry.After(now) { if entry.expiry.After(now) {
copy(entry.verifier, zeros[:])
delete(h.cache, user) delete(h.cache, user)
} }
} }
@@ -159,7 +162,13 @@ func (h *HtpasswdFile) Reload() error {
// Replace the Users map // Replace the Users map
h.mutex.Lock() h.mutex.Lock()
var zeros [sha256.Size]byte
// try to wipe the old cache entries
for _, entry := range h.cache {
copy(entry.verifier, zeros[:])
}
h.cache = make(map[string]cacheEntry) h.cache = make(map[string]cacheEntry)
h.users = users h.users = users
h.mutex.Unlock() h.mutex.Unlock()