authcore

func GenerateActivationToken ¶

func GenerateActivationToken(baseKey string) string

GenerateActivationToken produces a 100-character URL-safe token. The user key and the current timestamp are mixed into HKDF-derived entropy. The function is intentionally simple and uses only standard library components.

func GenerateRecoveryCode ¶

func GenerateRecoveryCode(baseKey string) (string, error)

GenerateRecoveryCode creates an 11-character uppercase alphanumeric code. The entropy source is HKDF derived from secure randomness and the base key.

Output uses Base32 without padding, trimmed to a fixed length.