Not sure how much you care about this, but [this line](https://github.com/Detry322/redisred/blob/9c757eac2b6072d9caa5aa914c046956b0b0a7b5/authentication.js#L17) is vulnerable to a timing side-channel attack.