Package eu.mrapik.minecraftservermcp.security

Class TimingSafe

java.lang.Object

eu.mrapik.minecraftservermcp.security.TimingSafe

public final class TimingSafe
extends Object

Constant-time comparisons for secret strings (e.g. bearer tokens) to reduce timing side channels.

Method Summary

Modifier and Type	Method	Description
static boolean	stringEquals(String a, String b)	Compares two strings for equality using MessageDigest.isEqual(byte[], byte[]) on UTF-8 bytes.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

stringEquals

public static boolean stringEquals(String a,
 String b)

Compares two strings for equality using MessageDigest.isEqual(byte[], byte[]) on UTF-8 bytes.

Parameters:

a - first string

b - second string

Returns:

true if both are non-null and equal in UTF-8 bytes (constant-time for equal-length secrets)