rustmailer/bichon 2.0.3

Release 2.0.3

on GitHub

Release Notes

Security

• Password comparisons now use subtle::ConstantTimeEq to prevent timing side-channel attacks.
• /api/login endpoint now enforces per-client-IP rate limiting; exceeding the threshold returns 429 Too Many Requests.
• Passwords are now stored as Argon2id hashes. Legacy encrypted credentials are lazily migrated to the new format on next successful login.

Bug Fixes

• Tantivy OpenWriteError is now properly included in the retry mechanism, improving write operation resilience.

Full Changelog: 2.0.2...2.0.3