Function timingSafeStringEqual

src/utils/timing-safe-equal.ts:8–12

(a: string, b: string)

 * throw nor leak length via timing.
 */
export function timingSafeStringEqual(a: string, b: string): boolean {
  const hashA = crypto.createHash('sha256').update(a).digest();
  const hashB = crypto.createHash('sha256').update(b).digest();
  return crypto.timingSafeEqual(hashA, hashB);
}