updated skills
This commit is contained in:
@@ -114,4 +114,3 @@ await sns.verifyNotification(payload, async (pem, msg, sigB64) => {
|
||||
bunx turbo lint typecheck test build --filter=@suaveplan/sms-providers
|
||||
bunx turbo test:coverage --filter=@suaveplan/sms-providers # 100/100/100/100
|
||||
```
|
||||
|
||||
|
||||
@@ -71,4 +71,4 @@ const sig = toHex(await hmac("SHA-256", utf8("secret"), utf8("payload")));
|
||||
|
||||
## Implementation Notes
|
||||
|
||||
`toHex` builds the string with `String#padStart(2, "0")` per byte rather than the bigint-shift trick to keep the implementation legible. `constantTimeEqual` never short-circuits on length mismatch *during* iteration — the early `length` check is unavoidable but does not leak content. Subtle's `importKey` is called inside `defaultHmac` rather than cached because production callers typically supply a fresh `key` per call.
|
||||
`toHex` builds the string with `String#padStart(2, "0")` per byte rather than the bigint-shift trick to keep the implementation legible. `constantTimeEqual` never short-circuits on length mismatch _during_ iteration — the early `length` check is unavoidable but does not leak content. Subtle's `importKey` is called inside `defaultHmac` rather than cached because production callers typically supply a fresh `key` per call.
|
||||
|
||||
Reference in New Issue
Block a user