<?php

namespace RoosterLMS\Events;

defined( 'ABSPATH' ) || exit;

final class FeedTokens {

	public static function sign( int $user_id, int $course_id ): string {
		return substr( hash_hmac( 'sha256', 'rooster-lms-events-feed|' . $user_id . '|' . $course_id, wp_salt( 'auth' ) ), 0, 32 );
	}

	public static function verify( int $user_id, int $course_id, string $token ): bool {
		return $user_id > 0 && $course_id > 0 && 1 === preg_match( '/^[a-f0-9]{32}$/', $token ) && hash_equals( self::sign( $user_id, $course_id ), $token );
	}
}