Send alerts to a webhook

import crypto from 'node:crypto';

export function verify(rawBody, headers, secret) {
  const timestamp = headers['x-lapsentry-timestamp'];
  const signature = headers['x-lapsentry-signature'];
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) return false;
  const expected = crypto
    .createHmac('sha256', secret)
    .update(`${timestamp}.${rawBody}`)
    .digest('hex');
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
}