rfid-database/src/lib/auth/tokens.ts

import { createHash, randomBytes } from "node:crypto";

const TOKEN_PREFIX = "rfid_";

export function generateApiToken(): {
  token: string;
  tokenHash: string;
  prefix: string;
} {
  const secret = randomBytes(32).toString("base64url");
  const token = `${TOKEN_PREFIX}${secret}`;
  return {
    token,
    tokenHash: hashToken(token),
    prefix: token.slice(0, 12),
  };
}

export function hashToken(token: string): string {
  return createHash("sha256").update(token).digest("hex");
}

export function isApiTokenFormat(token: string): boolean {
  return token.startsWith(TOKEN_PREFIX) && token.length > TOKEN_PREFIX.length + 16;
}