- Make ExpiresAt optional in CBOR (omitempty) for smaller tokens - Treat ExpiresAt=0 as 'never expires' in parser - URL-encode token with url.PathEscape() for safety - Add 'Never' as default TTL option in generator form
CBOR-encoded payloads with NaCl secretbox encryption. Supports expiration, image parameters with omitempty defaults.