const { timingSafeEqual } = require('node:crypto'); function safeEqual(a, b) { const ba = Buffer.from(a); const bb = Buffer.from(b); if (ba.length !== bb.length) return false; return timingSafeEqual(ba, bb); }