Webhooks

import { createHmac, timingSafeEqual } from "node:crypto";// rawBody: the request body exactly as it arrived, before any JSON parsing.export function verify(rawBody, header, secret) {  const parts = Object.fromEntries(header.split(",").map((part) => part.split("=")));  const seconds = Number(parts.t);  if (!Number.isInteger(seconds) || Math.abs(Date.now() / 1000 - seconds) > 300) return false;  const expected = createHmac("sha256", secret).update(`${seconds}.${rawBody}`).digest();  const given = Buffer.from(parts.v1 ?? "", "hex");  return given.length === expected.length && timingSafeEqual(given, expected);}

import hashlib, hmac, time# raw_body: the request body as bytes, exactly as it arrived.def verify(raw_body: bytes, header: str, secret: str) -> bool:    parts = dict(part.split("=", 1) for part in header.split(","))    seconds = int(parts.get("t", "0"))    if abs(time.time() - seconds) > 300:        return False    signed = f"{seconds}.".encode() + raw_body    expected = hmac.new(secret.encode(), signed, hashlib.sha256).hexdigest()    return hmac.compare_digest(expected, parts.get("v1", ""))