這大致等同於：

```Python
if not (credentials.username == "stanleyjobson") or not (credentials.password == "swordfish"):
    # 回傳錯誤
    ...
```

但藉由使用 `secrets.compare_digest()`，可以防禦一種稱為「計時攻擊」的攻擊。

### 計時攻擊 { #timing-attacks }

什麼是「計時攻擊」呢？

想像有攻擊者在嘗試猜測使用者名稱與密碼。

他們送出一個帶有使用者名稱 `johndoe` 與密碼 `love123` 的請求。

接著，你的應用程式中的 Python 程式碼等同於：

```Python

            copyOp.excludeNull();
        });
        return body;
    }

    /**
     * Validates if the given web configuration ID exists.
     *
     * @param webconfigId the web configuration ID to validate
     * @return true if the web configuration exists, false otherwise
     */
    protected Boolean isValidWebConfigId(final String webconfigId) {

            copyOp.excludeNull();
        });
        return body;
    }

    /**
     * Validates if the given web configuration ID exists.
     *
     * @param webconfigId the web configuration ID to validate
     * @return true if the web configuration exists, false otherwise
     */
    protected Boolean isValidWebConfigId(final String webconfigId) {

    // Avoid expectEquals() here to delay reason manufacture until necessary.
    if (getList().size() != expectedList.size()) {
      fail("size mismatch: " + reportContext(expectedList));
    }
    for (int i = 0; i < expectedList.size(); i++) {
      E expected = expectedList.get(i);
      E actual = getList().get(i);
      if (expected != actual && (expected == null || !expected.equals(actual))) {

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

package jcifs.smb1.smb1;

/**
 * DOS-style file filter implementation for SMB1 protocol.

    /**
     * Creates an artifact.
     *
     * @param request the request holding artifact creation parameters
     * @return an {@code Artifact}, never {@code null}
     * @throws IllegalArgumentException if {@code request} is null or {@code request.session} is null or invalid
     */
    @Nonnull
    Artifact create(@Nonnull ArtifactFactoryRequest request);

    @Nonnull
    default Artifact create(

    MavenProject getProject();

    MavenExecutionResult setTopologicallySortedProjects(List<MavenProject> projects);

    /**
     * @return the sorted list, or an empty list if there are no projects.
     */
    List<MavenProject> getTopologicallySortedProjects();

    MavenExecutionResult setDependencyResolutionResult(DependencyResolutionResult result);

        if (length == 0) {
            return offset + 4;
        }
        writeUShort(dest, offset, length);
        writeUShort(dest, offset + 2, length);
        return offset + 4;
    }

    static int writeSecurityBufferContent(final byte[] dest, final int pos, final int off, final byte[] src) {
        writeULong(dest, off, pos);
        if (src != null && src.length > 0) {

//// tab | Test

Yesterday, my friend wrote: "If you spell incorrectly correctly, you have spelled it incorrectly". To which I answered: "Correct, but 'incorrectly' is incorrectly not '"incorrectly"'".

/// note

The LLM will probably translate this wrong. Interesting is only if it keeps the fixed translation when retranslating.

///

////

//// tab | Info

| `version` | `string` | The version of the API. This is the version of your own application, not of OpenAPI. For example `2.5.0`. |
| `terms_of_service` | `str` | A URL to the Terms of Service for the API. If provided, this has to be a URL. |