Method verify

nodedb/src/control/security/auth_apikey.rs:171–192

Verify an `nda_` token. Returns the key record if valid.

(&self, token: &str)

    /// Verify an `nda_` token. Returns the key record if valid.
    pub fn verify(&self, token: &str) -> Option<AuthApiKey> {
        let stripped = token.strip_prefix("nda_")?;
        let parts: Vec<&str> = stripped.splitn(2, '_').collect();
        if parts.len() != 2 {
            return None;
        }
        let secret = parts[1];
        let secret_hash = hash_secret(secret);
        let hash_hex = hex_encode(&secret_hash);

        let idx = self.hash_index.read().unwrap_or_else(|p| p.into_inner());
        let key_id = idx.get(&hash_hex)?;

        let keys = self.keys.read().unwrap_or_else(|p| p.into_inner());
        let key = keys.get(key_id)?;

        if !key.is_valid(now_secs()) {
            return None;
        }

        Some(key.clone())
    }

    /// Update last-used tracking after successful verification.
    /// No-op on keys that are no longer valid — prevents audit trails from