app/models/aikotoba/account/service/authentication.rb
# NOTE: Verify passwords even when accounts are not found to prevent timing attacks.
Verify passwords even when accounts are not found to prevent timing attacks.
Verify passwords even when accounts are not found to prevent timing attacks .
def prevent_timing_atack
      return true unless @aikotoba_prevent_timing_atack
      account = @account_class.build_by(attributes: {email: @email, password: @password})
      account.password_match?(@password)
      true
    end
def prevent_timing_atack return true unless @aikotoba_prevent_timing_atack account = @account_class . build_by ( attributes : { email : @email , password : @password } ) account . password_match? ( @password ) true end
NOTE: Verify passwords even when accounts are not found to prevent timing attacks.
NOTE : Verify passwords even when accounts are not found to prevent timing attacks .