Timebased token creation for

token.go

package token

import (
    "crypto/sha256"
    "fmt"
    "os"
    "time"

    "github.com/cbarraford/octagon-ql/store"
)

// get our salt from the env var
var salt = os.Getenv("TOKEN_SALT")

func GenerateToken(ts int64, user store.User) string {
    str := fmt.Sprintf("%d-%d-%s-%s", ts, user.ID, user.Password, salt)
    sha := sha256.Sum256([]byte(str))
    return string(sha[:])
}

func ValidateToken(ts int64, token string, user store.User) bool {
    now := time.Now().Unix()

    // check if ts is older than a day
    if now-ts > 86400 {
        return false
    }
    // check ts is NOT in the future
    if now < ts {
        return false
    }

    return GenerateStudentToken(ts, student) == token
}