Derived implementations of `PartialEq` and `Hash` are susceptible to timing side channels that make them unsuitable for secret types. This change introduces timing-safe implementations of `PartialEq` and `Hash` to all secret types that compare/hash, respectively, the SHA-256 hash of the secret rather than the secret itself. Because these implementations are significantly more computationally expensive than ordinary `PartialEq` and `Hash` implementations, they're behind a non-default `timing-resistant-secret-traits` feature flag.
ed63126
An extensible, strongly-typed implementation of OAuth2 (RFC 6749).
Documentation is available on docs.rs. Release notes are available on GitHub.
This project is sponsored by Unflakable, a service for tracking and quarantining flaky tests.
