static String encode(String data, String secretKey) { final combined = '$data:$secretKey'; return base64Url.encode(utf8.encode(combined)); }