CAT is create temporary token securely and easily.

When you create token, the string will be look like this

ewogICJ1c2VybmFtZSI6ICJsaWxsNzQiLAogICJhY2wiOiAibG9naW4iLAogICJpcGFkciIgOiAiMTI3LjAuMC4xIiwKICAiZXhwaXJlIiA6ICIxNTM3ODg4NjY4Igp9.210939ec8da100a52e41861bcf7393de6ca86f6357a3c5078f5410bb14c82111

It just contain payload and hmac sha256 for verifying.

That means you should set salt variable randomly and you must manage your salt variable.

Functions

You might be confused, Let me explain.

Example

Creating Token

$cat = new CAT("Salt!");

$arr = array(

                    'username' => $username,

                    'acl' => $acl,

                    'ipadr' => $_SERVER["REMOTE_ADDR"],

                    'expire' => time() + 600

);

$data = $cat -> CreateToken(json_encode($arr));

setcookie($coookie_name, $data, time() + 600, "/", "", null, true);

Verifying Token

$cat = new CAT(getProperty("salt"));

if($cat -> VerifyToken($_COOKIE["token"], $acl, $ref)) {

​	return true;

}

return false;

When you save token into cookie, you must be save as http only cookie.

Otherwise, Attackers can try XSS.