WP_Recovery_Mode_Key_Service::validate_recovery_mode_key( string $token, string $key, int $ttl ): true|WP_Error

82	public function validate_recovery_mode_key( $token, $key, $ttl ) {83		$records = $this->get_keys();84 85		if ( ! isset( $records[ $token ] ) ) {86			return new WP_Error( 'token_not_found', __( 'Recovery Mode not initialized.' ) );87		}88 89		$record = $records[ $token ];90 91		$this->remove_key( $token );92 93		if ( ! is_array( $record ) || ! isset( $record['hashed_key'], $record['created_at'] ) ) {94			return new WP_Error( 'invalid_recovery_key_format', __( 'Invalid recovery key format.' ) );95		}96 97		if ( ! wp_verify_fast_hash( $key, $record['hashed_key'] ) ) {98			return new WP_Error( 'hash_mismatch', __( 'Invalid recovery key.' ) );99		}100 101		if ( time() > $record['created_at'] + $ttl ) {102			return new WP_Error( 'key_expired', __( 'Recovery key expired.' ) );103		}104 105		return true;106	}