Хүсэлтийн гарын үсэг

import { createHmac, timingSafeEqual } from "node:crypto";

// X-Raptora-Signature: t=1760000000,v1=<hex>[,v1=<hex>]
export const fromRaptora = (secret, header, method, pathWithQuery, body = "") => {
  const parts = header.split(",").map((part) => part.split("="));
  const t = Number(parts.find(([key]) => key === "t")?.[1]);
  if (!t || Math.abs(Date.now() / 1000 - t) > 300) return false;

  const expected = createHmac("sha256", secret)
    .update(`${t}.${method}.${pathWithQuery}.${body}`)
    .digest("hex");

  return parts.some(
    ([key, value]) =>
      key === "v1" &&
      value.length === expected.length &&
      timingSafeEqual(Buffer.from(value), Buffer.from(expected)),
  );
};