Name	Size	Mode	Actions
owner-notifier.service.ts	1745	0644	editdlrm
wa-core.module.ts	1352	0644	editdlrm
wa-http.client.ts	1736	0644	editdlrm
wa-inbound.service.spec.ts	5066	0644	editdlrm
wa-inbound.service.ts	5431	0644	editdlrm
wa-outbound.worker.ts	2723	0644	editdlrm
wa-queue.ts	447	0644	editdlrm
wa-sender.service.ts	4959	0644	editdlrm
wa-signature.spec.ts	1264	0644	editdlrm
wa-signature.ts	662	0644	editdlrm
wa-types.ts	1683	0644	editdlrm
wa-webhook.controller.spec.ts	2684	0644	editdlrm
wa-webhook.controller.ts	2308	0644	editdlrm
wa-window.spec.ts	860	0644	editdlrm
wa-window.ts	509	0644	editdlrm
whatsapp.module.ts	579	0644	editdlrm

import { createHmac, timingSafeEqual } from 'node:crypto'; /** * Validates Meta's X-Hub-Signature-256 header: "sha256=" + HMAC-SHA256(appSecret, rawBody). */ export function verifyWaSignature( rawBody: Buffer | undefined, signatureHeader: string | undefined, appSecret: string, ): boolean { if (!rawBody || !signatureHeader?.startsWith('sha256=')) return false; const expected = createHmac('sha256', appSecret).update(rawBody).digest('hex'); const received = signatureHeader.slice('sha256='.length); if (received.length !== expected.length) return false; return timingSafeEqual(Buffer.from(received, 'utf8'), Buffer.from(expected, 'utf8')); }