Verify a token: checks structural shape, HMAC, and TTL. Returns the parsed
payload on success; throws DeltaTokenVerificationError otherwise.
timingSafeEqual compares in time independent of the mismatch position,
so a token-fuzzing attacker can't learn the secret from comparison-time
side channels.
Verify a token: checks structural shape, HMAC, and TTL. Returns the parsed payload on success; throws
DeltaTokenVerificationErrorotherwise.timingSafeEqualcompares in time independent of the mismatch position, so a token-fuzzing attacker can't learn the secret from comparison-time side channels.