olcxjas-softworks/LarpixServer
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Improve nonce caching

Browse source
This commit is contained in:
olcxja 2026-05-01 20:09:07 +02:00
commit fbe022e4be
1 changed files with 3 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

14
LarpixServer/Account/Requests.cs
View file

@ -326,29 +326,17 @@ public class Requests
string plainPass = await Utils.GetPassword(await Utils.IdFromName(username));
foreach (var kvp in nonceHolder) //clearowanie nieuzytych nonce
{
/*
if (kvp.Key == username)
{
nonceHolder.TryRemove(kvp.Key, out _);
}
*/ //tak teraz sobie mysle moze jednak nie usuwac nonce?? bo co jak jakis cep beedzie ciagle komus spamic i
//bedzie mial nizszy ping i gosc nie bedzie mogl zadnego req wyslac, a nawet jak ktos bez secret to odczyta
//to nic z tym nie zrobi
if (kvp.Value.Item2 < DateTimeOffset.UtcNow.AddMinutes(-2))
{
nonceHolder.TryRemove(kvp.Key, out _);
}
else if (kvp.Key == username)
{
if (nonceHolder.TryGetValue(kvp.Key, out (string, DateTimeOffset) cachedNonce))
{
await context.Response.WriteAsync(Encryption.Encryption.EncryptString(cachedNonce.Item1,
await context.Response.WriteAsync(Encryption.Encryption.EncryptString(kvp.Value.Item1,
plainPass));
return;
}
}
}
string nonce = Encryption.Encryption.GetRandomString(64);
nonceHolder.TryAdd(username, (nonce, DateTimeOffset.UtcNow));