Function verifyWebhookSignature

verifyWebhookSignature(
    rawBody: string | Uint8Array<ArrayBufferLike>,
    signatureHeader: string | null | undefined,
    secret: string,
    timestampHeader?: string | null,
    toleranceInSeconds?: number,
): Promise<boolean>
Verify MarzPay HMAC-SHA256 signature for incoming webhooks.
Parameters
- rawBody: string | Uint8Array<ArrayBufferLike>
  Raw JSON request body string
- signatureHeader: string | null | undefined
  Value of 'x-marzpay-signature' (or 'x-signature') header e.g. "t=1700000000,v1=abc123def..."
- secret: string
  Secret key used for signing (e.g. process.env.MARZPAY_WEBHOOK_SECRET)
- OptionaltimestampHeader: string | null
  Optional value of 'x-marzpay-timestamp' header if separate
- toleranceInSeconds: number = 300
Returns Promise<boolean>
Boolean indicating signature validity
- Defined in src/utils/crypto.ts:10