package security

import (
	"crypto/rand"
	"encoding/base64"
)

// RandomURLSafe 生成 URL-safe 随机串（用于 opaque token、authorization code 等）。
func RandomURLSafe(nBytes int) (string, error) {
	b := make([]byte, nBytes)
	if _, err := rand.Read(b); err != nil {
		return "", err
	}
	return base64.RawURLEncoding.EncodeToString(b), nil
}