Add mutex to deriveArgon2IDKey

pagefaultgames · Apr 19, 2024 · fbd4a60 · fbd4a60
1 parent 0fec7cb
commit fbd4a60
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/api/account/common.go b/api/account/common.go
@@ -2,6 +2,7 @@ package account
 
 import (
 	"regexp"
+	"sync"
 
 	"golang.org/x/crypto/argon2"
 )
@@ -21,8 +22,14 @@ const (
 	TokenSize = 32
 )
 
-var isValidUsername = regexp.MustCompile(`^\w{1,16}$`).MatchString
+var (
+	isValidUsername = regexp.MustCompile(`^\w{1,16}$`).MatchString
+	argonMtx sync.Mutex
+)
 
 func deriveArgon2IDKey(password, salt []byte) []byte {
+	argonMtx.Lock()
+	defer argonMtx.Unlock()
+
 	return argon2.IDKey(password, salt, ArgonTime, ArgonMemory, ArgonThreads, ArgonKeySize)
 }