(token: &str, username: &str, server_key: &[u8], password: &str)
| 91 | } |
| 92 | |
| 93 | fn verify_token(token: &str, username: &str, server_key: &[u8], password: &str) -> bool { |
| 94 | let master_key = derive_master_key(server_key, password); |
| 95 | let timestamp = get_current_timestamp(); |
| 96 | let token_key = generate_token_key(&master_key, timestamp); |
| 97 | let payload = format!("{}|{}", username, timestamp); |
| 98 | |
| 99 | let expected_token = URL_SAFE_NO_PAD.encode( |
| 100 | hmac::sign(&token_key, payload.as_bytes()).as_ref() |
| 101 | ); |
| 102 | |
| 103 | token == expected_token |
| 104 | } |
nothing calls this directly
no test coverage detected