Dostawa dynamiczna

const crypto = require("crypto");

function verifySignature(secret, body, signature) {
  const calculatedSignature = crypto
    .createHmac("sha256", secret)
    .update(body)
    .digest("hex")
    .toUpperCase();

  return calculatedSignature === signature.toUpperCase();
}

app.use("/webhook", express.raw({ type: "application/json" }));

app.post("/webhook", (req, res) => {
  const signature = req.headers["x-signature"];
  const body = req.body.toString("utf8");

  if (!verifySignature(process.env.WEBHOOK_SECRET, body, signature)) {
    return res.status(401).send("Nieprawidłowy podpis");
  }

  // Przetwórz webhook...
});

import hmac
import hashlib

def verify_signature(secret: str, body: str, signature: str) -> bool:
    calculated_signature = hmac.new(
        secret.encode('utf-8'),
        body.encode('utf-8'),
        hashlib.sha256
    ).hexdigest().upper()

    return calculated_signature.upper() == signature.upper()

<?php

function verifySignature($secret, $body, $signature) {
    $calculatedSignature = strtoupper(
        hash_hmac('sha256', $body, $secret)
    );

    return hash_equals($calculatedSignature, strtoupper($signature));
}