Function verify_hmac_sha256

nodedb/src/control/security/jwt.rs:256–268

Verify HMAC-SHA256 signature.

(secret: &[u8], message: &[u8], expected_signature: &[u8])

/// Verify HMAC-SHA256 signature.
fn verify_hmac_sha256(secret: &[u8], message: &[u8], expected_signature: &[u8]) -> bool {
    use hmac::{Hmac, Mac};
    use sha2::Sha256;

    type HmacSha256 = Hmac<Sha256>;

    let mut mac = match HmacSha256::new_from_slice(secret) {
        Ok(m) => m,
        Err(_) => return false,
    };
    mac.update(message);
    mac.verify_slice(expected_signature).is_ok()
}

/// Verify RSA-SHA256 (RS256) signature using a DER-encoded public key.
///