Function verifyHmacSha256

packages/trigger-sdk/src/security.ts:54–64

(
  headerValue: string,
  headerEncoding: BinaryToTextEncoding,
  secret: BinaryLike | KeyObject,
  body: string
)

}

export function verifyHmacSha256(
  headerValue: string,
  headerEncoding: BinaryToTextEncoding,
  secret: BinaryLike | KeyObject,
  body: string
): boolean {
  const bodyDigest = crypto.createHmac("sha256", secret).update(body).digest(headerEncoding);
  const signature = headerValue?.replace("hmac-sha256=", "").replace("sha256=", "") ?? "";

  return signature === bodyDigest;
}