لجریانو چطور از داده‌های حسابداری شما محافظت می‌کند

import crypto from "node:crypto";

// rawBody: the exact request body string, before JSON parsing
export function verifyLedgerianoWebhook(rawBody, headers, secret) {
  const timestamp = headers["x-ledgeriano-timestamp"];
  const signature = headers["x-ledgeriano-signature"] ?? ""; // "sha256=<hex>"

  // Reject messages older than 5 minutes
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) return false;

  const expected = "sha256=" + crypto
    .createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

  return signature.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}