constant-time-auth-failure-prevents-email-enumeration
On login with an unknown email, always execute a dummy argon2id hash (same computational cost as a real hash) before returning ‘Invalid email or password’. Without the dummy hash, unknown-email lookups return in microseconds while known-email failures take milliseconds, enabling email enumeration via timing oracle. This pattern was implemented in R-Same UserService.