davideandClaude Sonnet 5 31bc9a327f Compare admin token as UTF-8 bytes to avoid TypeError on non-ASCII input (B-46) ...

secrets.compare_digest raises TypeError instead of returning False when a
str argument contains non-ASCII characters, turning a bad admin token into
an unhandled 500 instead of the expected 403. Encode both sides before
comparing.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-27 16:17:40 +02:00

..

__init__.py

Scaffold project layout, DB schema and settings

2026-07-21 10:25:23 +02:00

admin.py

Compare admin token as UTF-8 bytes to avoid TypeError on non-ASCII input (B-46)

2026-07-27 16:17:40 +02:00

bets.py

Let the system recover from a broadcast that never confirms

2026-07-27 00:31:24 +02:00

qr.py

Add a QR code endpoint for PLM addresses

2026-07-21 10:51:56 +02:00

rounds.py

Cap SSE subscribers per client IP instead of only globally (B-38)

2026-07-27 14:44:15 +02:00

users.py

Stamp UTC on naive API timestamps before serializing (B-35)

2026-07-27 12:20:22 +02:00

withdrawals.py

Let the system recover from a broadcast that never confirms

2026-07-27 00:31:24 +02:00