Orange Orbit

Changelog

Security

• Use crypto/rand instead of math/rand for cryptographically secure token generation
• Use constant-time comparison (crypto/subtle.ConstantTimeCompare) to prevent timing attacks on token verification

Changed

• Format constants now follow Go naming conventions: Alpha, AlphaNumeric, Numeric
• Export Format type for better API discoverability
• Add validation for invalid format values

Deprecated

• ALPHA, ALPHA_NUMERIC, NUMERIC constants are deprecated in favour of Alpha, AlphaNumeric, Numeric

Fixed

• Remove unnecessary break statements in switch
• Remove deprecated rand.Seed calls (unnecessary since Go 1.20)