otp and email provders to use time-constant equality operators

[kspearrin]

🎟️ Tracking

TBD

📔 Objective

Email and OTP providers should use fixed-time comparisons of OTP codes to prevent the remote possibility of timing attacks.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.17%. Comparing base (fa8d65c) to head (1cab1c9).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6279      +/-   ##
==========================================
- Coverage   49.21%   49.17%   -0.04%     
==========================================
  Files        1785     1782       -3     
  Lines       79407    79298     -109     
  Branches     7058     7045      -13     
==========================================
- Hits        39080    38997      -83     
+ Misses      38808    38782      -26     
  Partials     1519     1519              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Checkmarx One – Scan Summary & Details – 9038e926-a57b-42f2-85fb-1d687b1e1e7a

Great job! No new security vulnerabilities introduced in this pull request