WP_Recovery_Mode_Cookie_Service::validate_cookie( string $cookie = '' ): true|WP_Error

76	public function validate_cookie( $cookie = '' ) {77 78		if ( ! $cookie ) {79			if ( empty( $_COOKIE[ RECOVERY_MODE_COOKIE ] ) ) {80				return new WP_Error( 'no_cookie', __( 'No cookie present.' ) );81			}82 83			$cookie = $_COOKIE[ RECOVERY_MODE_COOKIE ];84		}85 86		$parts = $this->parse_cookie( $cookie );87 88		if ( is_wp_error( $parts ) ) {89			return $parts;90		}91 92		list( , $created_at, $random, $signature ) = $parts;93 94		if ( ! ctype_digit( $created_at ) ) {95			return new WP_Error( 'invalid_created_at', __( 'Invalid cookie format.' ) );96		}97 98		/** This filter is documented in wp-includes/class-wp-recovery-mode-cookie-service.php */99		$length = apply_filters( 'recovery_mode_cookie_length', WEEK_IN_SECONDS );100 101		if ( time() > $created_at + $length ) {102			return new WP_Error( 'expired', __( 'Cookie expired.' ) );103		}104 105		$to_sign = sprintf( 'recovery_mode|%s|%s', $created_at, $random );106		$hashed  = $this->recovery_mode_hash( $to_sign );107 108		if ( ! hash_equals( $signature, $hashed ) ) {109			return new WP_Error( 'signature_mismatch', __( 'Invalid cookie.' ) );110		}111 112		return true;113	}