From a7ccc5a23373d8e8eab9f1b7e47f0972f2963a7b Mon Sep 17 00:00:00 2001 From: Cailean Finn Date: Tue, 18 Jun 2024 21:09:19 +0100 Subject: [PATCH] buffer test --- server.js | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/server.js b/server.js index 0105796..2da0955 100644 --- a/server.js +++ b/server.js @@ -68,10 +68,16 @@ app.post('/api', (req, res) => { if (!signature || !payload) { return res.status(400).send('Invalid payload or missing signature'); } - + // Verify the secret const hmac = crypto.createHmac('sha256', GITEA_SECRET); const digest = `sha256=${hmac.update(payload).digest('hex')}`; + + // Buffer lengths + const bufferSignature = Buffer.from(signature); + const bufferDigest = Buffer.from(digest); + + console.log(bufferDigest, bufferSignature) if (crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(digest))) { // Secret is valid, update the repository