fix(server): equalize login timing for unknown usernames - #531

Open

7487 wants to merge 2 commits into

mozilla-ai:mainfrom

7487:fix/login-timing-side-channel

Commits on Sep 1, 2026

fix(server): equalize login timing for unknown usernames

7487
and
claude
committed
8835ec9
test(server): assert password verification on the known-user failure path

7487
and
claude
committed
2663b0b