tokens
HMAC-SHA256 action-token signer (generalized DLQ-resubmit pattern).
Tokens are payload_b64url.signature_b64url strings. The payload is a
sorted-keys JSON dict with exp (unix seconds) and act (action name).
Signature verification uses hmac.compare_digest for constant time.
Classes:
| Name | Description |
|---|---|
InvalidActionToken |
Token is malformed, mis-signed, expired, or scoped to a different action. |
Bases: ValueError
Token is malformed, mis-signed, expired, or scoped to a different action.