FastComments Documentation

Here you can edit and run the code snippet from our documentation.

Example Code Snippet "Verificando uma entrega"

import { createHmac, timingSafeEqual } from "node:crypto";

async function receive(c) {
  // Os bytes exatos que chegaram. NÃO use c.req.json() e reserialize.
  const rawBody = await c.req.raw.text();
  const timestamp = c.req.raw.headers.get("X-FastComments-Timestamp");
  const signature = c.req.raw.headers.get("X-FastComments-Signature");

if (!timestamp || !signature) return new Response("Missing headers", { status: 400 });

// Rejeitar entregas antigas para que uma solicitação capturada não possa ser reproduzida mais tarde.
  if (Math.abs(Math.floor(Date.now() / 1000) - Number(timestamp)) > 300) {
    return new Response("Timestamp outside window", { status: 400 });
  }

const expected = "sha256=" + createHmac("sha256", Deno.env.get("FASTCOMMENTS_API_SECRET"))
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

const a = new TextEncoder().encode(signature);
  const b = new TextEncoder().encode(expected);
  if (a.length !== b.length || !timingSafeEqual(a, b)) {
    return new Response("Signature mismatch", { status: 401 });
  }

// ...tratar JSON.parse(rawBody)
  return Response.json({ received: true });
}

app.put("/", receive);
app.delete("/", receive);

Example Code Snippet "Verificando uma entrega"

Result