diff --git a/task1-backend/lib/api.go b/task1-backend/lib/api.go index 5d3c803..c25b277 100644 --- a/task1-backend/lib/api.go +++ b/task1-backend/lib/api.go @@ -7,6 +7,7 @@ import ( "encoding/hex" "encoding/json" "fmt" + "math/rand" "net/http" "regexp" "strings" @@ -100,6 +101,8 @@ func (a *Api) checkAnswer(ctx *routing.Context) (err error) { log.Debugf("req answer, %v", answer) log.Debugf("req hashed, %s", hexed) + time.Sleep(time.Second + (time.Millisecond * time.Duration(rand.Intn(500)))) + valid := subtle.ConstantTimeCompare(a.Answer, hexed) if valid == 0 { return routing.NewHTTPError(http.StatusForbidden)