Function issue_token_bytes

nodedb-cluster/src/auth/join_token.rs:52–65

Issue a new HMAC-SHA256 join token for `for_node` that expires at `expiry_unix_secs`. Returns the raw token bytes (hex-encode for printing or transmission). Use [`token_to_hex`] to produce the hex string.

(
    secret: &[u8; 32],
    for_node: u64,
    expiry_unix_secs: u64,
)

///
/// Use [`token_to_hex`] to produce the hex string.
pub fn issue_token_bytes(
    secret: &[u8; 32],
    for_node: u64,
    expiry_unix_secs: u64,
) -> Result<[u8; TOKEN_BYTE_LEN], TokenError> {
    let mut buf = [0u8; TOKEN_BYTE_LEN];
    buf[..8].copy_from_slice(&for_node.to_le_bytes());
    buf[8..16].copy_from_slice(&expiry_unix_secs.to_le_bytes());
    let mut mac = <Hmac<Sha256>>::new_from_slice(secret).map_err(|_| TokenError::HmacKeyLength)?;
    mac.update(&buf[..TOKEN_HEADER_LEN]);
    let tag = mac.finalize().into_bytes();
    buf[TOKEN_HEADER_LEN..].copy_from_slice(&tag);
    Ok(buf)
}

/// Convenience: issue a token and return it as a lowercase hex string.
pub fn issue_token(