Timing Attack

github.com/bitly/oauth2proxy is vulnerable to timing attacks. This vulnerability is caused because the cookies are not compared in constant time, allowing malicious users to guess the valid cookies based on the time that a comparison takes...