FastComments Documentation

Here you can edit and run the code snippet from our documentation.

Example Code Snippet "验证交付"

import { createHmac, timingSafeEqual } from "node:crypto";

async function receive(c) {
  // 到达的原始字节。不要使用 c.req.json() 并重新序列化。
  const rawBody = await c.req.raw.text();
  const timestamp = c.req.raw.headers.get("X-FastComments-Timestamp");
  const signature = c.req.raw.headers.get("X-FastComments-Signature");

if (!timestamp || !signature) return new Response("Missing headers", { status: 400 });

// 拒绝过期的交付，以防捕获的请求被稍后重放。
  if (Math.abs(Math.floor(Date.now() / 1000) - Number(timestamp)) > 300) {
    return new Response("Timestamp outside window", { status: 400 });
  }

const expected = "sha256=" + createHmac("sha256", Deno.env.get("FASTCOMMENTS_API_SECRET"))
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

const a = new TextEncoder().encode(signature);
  const b = new TextEncoder().encode(expected);
  if (a.length !== b.length || !timingSafeEqual(a, b)) {
    return new Response("Signature mismatch", { status: 401 });
  }

// ...处理 JSON.parse(rawBody)
  return Response.json({ received: true });
}

app.put("/", receive);
app.delete("/", receive);

Example Code Snippet "验证交付"

Result