Codeman maintainer 5a8fc853c3 fix(auth): share one verify between identical in-flight logins ...

Reserving a slot per request refused a correct password with the slots it had
filled itself: after a restart the browser replays its cached Basic header on many
parallel requests. Identical credentials from one IP now join the verify already in
flight for them (keyed on a SHA-256 digest), skipping the gates and its scrypt cost.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-24 14:54:44 +02:00

..

auth.ts

fix(auth): share one verify between identical in-flight logins

2026-10-24 14:54:44 +02:00