Function validateZoomSignature

apps/sim/lib/webhooks/providers/zoom.ts:26–52

(
  secretToken: string,
  signature: string,
  timestamp: string,
  body: string
)

 */
/** Exported for tests — Zoom signs `v0:{timestamp}:{rawBody}`. */
export function validateZoomSignature(
  secretToken: string,
  signature: string,
  timestamp: string,
  body: string
): boolean {
  try {
    if (!secretToken || !signature || !timestamp || !body) {
      return false
    }

    const nowSeconds = Math.floor(Date.now() / 1000)
    const requestSeconds = Number.parseInt(timestamp, 10)
    if (Number.isNaN(requestSeconds) || Math.abs(nowSeconds - requestSeconds) > 300) {
      return false
    }

    const message = `v0:${timestamp}:${body}`
    const computedHash = hmacSha256Hex(message, secretToken)
    const expectedSignature = `v0=${computedHash}`

    return safeCompare(expectedSignature, signature)
  } catch (err) {
    logger.error('Zoom signature validation error', err)
    return false
  }
}

async function resolveZoomChallengeSecrets(
  path: string,