Password Hash Timing Attack Vulnerability

Fixes

• 1.Use crypto.timingSafeEqual() for hash comparison
• 2.Use bcrypt.compare() which is timing-safe by default
• 3.Never use === for comparing hashes directly

Related Errors