openvibers/openvibe.live Commits

payments: use the module's crypto import

OP OpenVibers committed 23 Sept 2026 · 42e3fdd2c7 · 1 file, +3 −4





Changes
ddiff --git a/server/monetization/payments.js b/server/monetization/payments.js
iindex a444a87a..f9e7c880 100644
---- a/server/monetization/payments.js
++++ b/server/monetization/payments.js
@@@ -206,10 +206,9 @@ function ccbillVerify(query) {
      const secret = s('ccbill_webhook_secret');
      if (!secret) return false;
      // Constant-time: compare SHA-256 digests so neither length nor content leaks through timing.
--    const nodeCrypto = require('crypto');
--    const a = nodeCrypto.createHash('sha256').update(String(query.secret || '')).digest();
--    const b = nodeCrypto.createHash('sha256').update(String(secret)).digest();
--    return nodeCrypto.timingSafeEqual(a, b);
++    const a = crypto.createHash('sha256').update(String(query.secret || '')).digest();
++    const b = crypto.createHash('sha256').update(String(secret)).digest();
++    return crypto.timingSafeEqual(a, b);
  }
  
  // ══════════════════════════════════════════ CRYPTO (NOWPayments) ══