hmac cloudflare

gistfile1.txt

# timestamp is ignored, since we use a very large token validity: 1000000000.

(
  lower(http.request.headers["x-screeb-hmac-digest"][0]) eq “hmac-sha256-base64”
)

and

(
  is_timed_hmac_valid_v0(
    "secret",
    http.request.headers["x-screeb-hmac-signature"][0],
    1000000000,
    http.request.timestamp.sec,
    0
  )
)