Generazione di token da username password

TokenGenerator.cs

    public class TokenGenerator
    {
        private const string Alg = "HmacSHA256";

        public string Generate(string username, string password, string ip, string userAgent, long ticks)
        {

            string hash = string.Join(":", username, ip, userAgent, ticks.ToString());
            string hashLeft = "";
            string hashRight = "";

            using (HMAC hmac = HMAC.Create(Alg))
            {
                hmac.Key = Encoding.UTF8.GetBytes(Utils.HashPassword(password));
                hmac.ComputeHash(Encoding.UTF8.GetBytes(hash));

                hashLeft = Convert.ToBase64String(hmac.Hash);
                hashRight = string.Join(":", username, ticks.ToString());
            }

            return Convert.ToBase64String(Encoding.UTF8.GetBytes(string.Join(":", hashLeft, hashRight)));
        }
    }