claude-code/packages/remote-control-server/src/auth/token.ts

import { storeCreateToken, storeGetUserByToken } from "../store";

let tokenCounter = 0;

/** Generate a random session token and associate it with a user */
export function issueToken(username: string): { token: string; expires_in: number } {
  // Use crypto.getRandomValues for uniqueness
  const bytes = new Uint8Array(16);
  crypto.getRandomValues(bytes);
  const hex = Array.from(bytes)
    .map((b) => b.toString(16).padStart(2, "0"))
    .join("");
  const token = `rct_${tokenCounter++}_${hex}`;
  storeCreateToken(username, token);
  return { token, expires_in: 86400 };
}

/** Resolve a token to a username. Returns null if invalid. */
export function resolveToken(token: string | undefined): string | null {
  if (!token) return null;
  const entry = storeGetUserByToken(token);
  if (!entry) return null;
  return entry.username;
}