title: WordPress Nonce not verifying
body: <p>I have a two step process when loggin in a user with a client app to the WordPress site</p>
  
  <p>1st Step : Client app calls the API url of the WordPress site, it creates a nonce and returns the nonce token to the app.</p>
  
  <pre><code>$nonce = wp_create_nonce("my-action");
  </code></pre>
  
  <p>2nd Step : Client app loads the WordPress site using a Web view with a GET request including  the nonce in a GET parameter. Then verifies the nonce.</p>
  
  <pre><code> wp_verify_nonce( $_GET['token'], 'my-action' );
  </code></pre>
  
  <p>I simulated this, with Postman and desktop browser. But nonce cannot be verified. It always fails. </p>
  
  <p>This is where I create nonce</p>
  
  <pre><code>if(username_exists($username)){
              $user = get_user_by('login', $username );
  
              $result['status'] = "already_registered";
  
              $token = sha1(date('H:i'));
              $result['token'] = $token;
  
              $result['nonce'] = wp_create_nonce("my-action");
  
              return $result;
  
          }
  </code></pre>
  
  <p>This is where I check nonce...</p>
  
  <pre><code>function userAuth(){
  
      echo $_GET['token'];
  
      $nonce = wp_verify_nonce( $_GET['token'], 'my-action' );
  
      //Do more things based on above verification
  
  }
  </code></pre>
  
  <p>Any idea what's wrong ?</p>