Which function do you recommend for generating session auth token?

[binarykitchen]

Hi

I'm about to write new code for my web app to generate user sessions after logins.

Which one uuid function is best for generating session tokens?

My only requirements are:

• Should be at least 20 random bytes,
• encoded with base32 and
• not include time information

My guess is that uuidV4 is probably the best pick. Am I right?

Thanks for your advice

[broofa]

Should be at least 20 random bytes,

All UUIDs are 32 bytes long.

encoded with base32 and

UUIDs are hex-encoded, not base32, per the specification.

If you want a base32 id, then you should be looking elsewhere. E.g. nanoid or ulid

not include time information

v4 is random values only. No timestamp.

[binarykitchen]

Thanks, all clear. No further questions :)