HMAC-SHA256 ??? TimingSafeEqual
SigVerify ????
Valide assinaturas de webhooks (Stripe, Pix, GitHub) com prote????o contra Replay Attack.
Payload (JSON ou Texto)
{"event":"payment.approved","amount":29.00}
Secret Key do Webhook
Assinatura Recebida (Header)
Calcular & Validar Assinatura