Function create

nodedb/src/ctl/join_token.rs:27–46

(data_dir: &Path, for_node: u64, ttl: Duration)

const CLUSTER_SECRET_LEN: usize = 32;

pub fn create(data_dir: &Path, for_node: u64, ttl: Duration) -> Result<(), String> {
    let secret_path = data_dir.join("tls").join("cluster_secret.bin");
    let secret = read_cluster_secret(&secret_path)?;

    let expiry = SystemTime::now()
        .duration_since(UNIX_EPOCH)
        .map_err(|e| format!("system clock before UNIX epoch: {e}"))?
        + ttl;
    let expiry_secs = expiry.as_secs();

    let hex = tok::issue_token(&secret, for_node, expiry_secs)
        .map_err(|e| format!("issue token: {e}"))?;

    println!("join token (expires at unix {expiry_secs}):");
    println!("{hex}");
    println!();
    println!("usage on joiner:");
    println!("  NODEDB_JOIN_TOKEN={hex} nodedb <config.toml>");
    Ok(())
}

fn read_cluster_secret(path: &Path) -> Result<[u8; CLUSTER_SECRET_LEN], String> {
    let bytes =