Verify a lowercase-hex HMAC-SHA256 signature in constant time (crypto.timingSafeEqual). Malformed signatures (wrong length, non-hex, uppercase, trailing characters) return false instead of throwing.
crypto.timingSafeEqual
false
The key; strings are UTF-8 encoded.
The message; strings are UTF-8 encoded.
Exactly 64 lowercase hex characters.
true when the signature is valid.
true
Verify a lowercase-hex HMAC-SHA256 signature in constant time (
crypto.timingSafeEqual). Malformed signatures (wrong length, non-hex, uppercase, trailing characters) returnfalseinstead of throwing.