25 lines
591 B
TypeScript
25 lines
591 B
TypeScript
import { Buffer } from "node:buffer";
|
|
import { createHmac, timingSafeEqual } from "node:crypto";
|
|
|
|
function s2b(str: string, encoding: BufferEncoding): Buffer {
|
|
return Buffer.from(str, encoding);
|
|
}
|
|
|
|
function safeCompare(a: Buffer, b: Buffer): boolean {
|
|
if (a.length !== b.length) {
|
|
return false;
|
|
}
|
|
return timingSafeEqual(a, b);
|
|
}
|
|
|
|
export default function validateSignature(
|
|
body: string | Buffer,
|
|
channelSecret: string,
|
|
signature: string,
|
|
): boolean {
|
|
return safeCompare(
|
|
createHmac("SHA256", channelSecret).update(body).digest(),
|
|
s2b(signature, "base64"),
|
|
);
|
|
}
|