Compare secrets in constant time Javascript A plain === leaks how much of the token matched through its timing. This does not. Security security timing crypto chris