module ActiveSupport
  class MessageVerifier
    private
      # constant-time comparison algorithm to prevent timing attacks
      def secure_compare(a, b)
        if a.respond_to?(:bytes)
          a.bytes.to_a == b.bytes.to_a
        else
          a.to_a == b.to_a
        end
      end
   end
end