Skip to contents

Verification is the candidate: the caller must still resolve the returned version through atlas_resolve_ver() with the instance's atlas_allow_access(), so a token minted by another instance (the preview host, for a restricted version) never widens what this process renders.

Usage

ver_token_verify(token, secret = ver_token_secret(), now = Sys.time())

Arguments

token

the string from the page's hidden input (may be NULL/"")

secret

from ver_token_secret()

now

the current time (injectable for tests)

Value

the version label, or NULL (missing, malformed, tampered, expired)