[8.x] Patch for timeless timing attack vulnerability in user login#44069

Merged

taylorotwell merged 8 commits intolaravel:8.xfrom JensJI:feature/user-enumaration-vulnerability

Sep 21, 2022

+198-20

Commits on Sep 9, 2022

Timebox
JensJI
committed
Fixed formatting
JensJI
committed

Commits on Sep 12, 2022

Increased delta time for tests in SupportHelpersTests.php that uses usleep as part of the test. This is necessary because usleep on Windows is unreliable, and other tests that uses CPU (for instanc…
JensJI
committed

Commits on Sep 19, 2022

Timebox: ensured timebox property on SessionGuard would not be null. Added config option for validateCredentialsMinimumTime per guard
JensJI
committed

Commits on Sep 21, 2022