app/lib/bearer.server.ts

Functions

Imports

It imports app/lib/bytes.mjs. Imported by app/lib/operator/auth.server.ts, app/lib/smoke.server.ts.

Source

1// The bearer tokens' label. The compare itself is the family's one constant-time copy,
2// `safeEqual` from `@dustinedwards/site-runtime/compare`. Kept `.server` because the secrets
3// boundary is a path rule.
4
5import { fnv1a32 } from "./bytes.mjs";
6
7/**
8 * A label for commit messages and rate-limit keys. 32-bit FNV-1a is not the token and cannot be
9 * read back into one, but a holder of the label can confirm a guess; `safeEqual` is the
10 * security boundary.
11 */
12export function tokenLabel(token: string): string {
13  return fnv1a32(token);
14}