pub fn mint_desktop_session_cookie(key: &[u8]) -> Result<String>Expand description
Mint a signed viewer-session cookie value without the HTTP login flow.
The desktop shell pre-authorizes its WebView with this: it runs as the same user as the daemon and reads the same persisted signing key, so possession of the key is the credential. The cookie carries the ephemeral TTL — a desktop window re-mints on every launch, so it never needs a long life.