yc-demo/webhook-lab

1
2
3
4
5
6
7
8
9

import {createHmac, timingSafeEqual} from "node:crypto";
export function sign(payload, secret) {
  return "sha256=" + createHmac("sha256", secret).update(payload).digest("hex");
}
export function verify(payload, signature, secret) {
  if (typeof signature !== "string" || !/^sha256=[a-f0-9]{64}$/.test(signature)) return false;
  return timingSafeEqual(Buffer.from(sign(payload, secret)), Buffer.from(signature));
}