Method sign

src/server/web/auth/adapter.ts:123–127

(id: string)

  // ── Cookie signing ────────────────────────────────────────────────────────

  sign(id: string): string {
    const hmac = createHmac("sha256", this.key);
    hmac.update(id);
    return `${id}.${hmac.digest("base64url")}`;
  }

  /**
   * Verifies the HMAC and returns the raw session ID, or null on failure.