Confirm that there is a timing attack in DRF-SQLite-Token Authentication about django-rest-framework-timing HOT 3 OPEN

Can you please direct to a link where the detailed information is present?

from django-rest-framework-timing.

hmmmm, well, this task if almost self explanatory. The detailed steps are:

• Configure this repo to use token authentication (see settings.py)
• Use the tokens we have in the README.md to authenticate. Make sure you get a 200 response.
• Send HTTP requests with a token with all valid chars except the last one
• Send HTTP requests with a token with first valid char and then all invalid
• Compare timing responses for samples captured in previous steps
• If the timing info is different then there is a timing attack

from django-rest-framework-timing.

Good enough, thanks!

from django-rest-framework-timing.