Function HashAPIKey

core/http/auth/apikeys.go:39–47

HashAPIKey returns the HMAC-SHA256 hex digest of the given plaintext key. If hmacSecret is empty, falls back to plain SHA-256 for backward compatibility.

(plaintext, hmacSecret string)

// HashAPIKey returns the HMAC-SHA256 hex digest of the given plaintext key.
// If hmacSecret is empty, falls back to plain SHA-256 for backward compatibility.
func HashAPIKey(plaintext, hmacSecret string) string {
	if hmacSecret == "" {
		h := sha256.Sum256([]byte(plaintext))
		return hex.EncodeToString(h[:])
	}
	mac := hmac.New(sha256.New, []byte(hmacSecret))
	mac.Write([]byte(plaintext))
	return hex.EncodeToString(mac.Sum(nil))
}

// CreateAPIKey generates and stores a new API key for the given user.
// Returns the plaintext key (shown once) and the database record.