CheckPasswordHash checks if a given password matches a bcrypt hash.

GetApiKey retrieves the API key from the Authorization header.

GetBearerToken retrieves the bearer token from the Authorization header.

HashPassword generates a bcrypt hash from a given password.

MakeJWT generates a JSON Web Token (JWT) for a given user ID, token secret, and expiration duration.

MakeRefreshToken generates a cryptographically secure random refresh token.

ValidateJWT validates a JSON Web Token (JWT) and returns the user ID.