diff --git a/src/utils/index.ts b/src/utils/index.ts index 42e8d44..de7cc4a 100644 --- a/src/utils/index.ts +++ b/src/utils/index.ts @@ -27,12 +27,12 @@ export function verifySignature( const signatureBuffer = Buffer.from(signature, 'utf8'); if ( - signatureBuffer.length !== digest.length || - !crypto.timingSafeEqual(digest, signatureBuffer) + signatureBuffer.length !== digest.length ) { throw new Error('The signature is invalid.'); } - - console.log('The signature is valid'); + if(!crypto.timingSafeEqual(digest, signatureBuffer){ + throw new Error('invalid signature: content mismatch') + } return true; }