Method verifyToken

app/src/API/Server.cpp:574–577

* @brief Constant-time check of a client-provided token against the configured one. */

 * @brief Constant-time check of a client-provided token against the configured one.
 */
bool API::Server::verifyToken(const QByteArray& provided) const
{
  return !m_authToken.isEmpty() && constantTimeEquals(provided, m_authToken.toUtf8());
}

/**
 * @brief Gates API-originated device writes behind a one-time user consent prompt. Headless