update auth validation

matsk-sinch · matsk-sinch · commit b669727670ed · 2026-03-24T16:23:38.000+01:00
diff --git a/sinch/domains/authentication/webhooks/v1/authentication_validation.py b/sinch/domains/authentication/webhooks/v1/authentication_validation.py
@@ -33,7 +33,7 @@ def validate_signature_header(
         return False
 
     expected_signature = compute_hmac_signature(body, callback_secret)
-    return signature == expected_signature
+    return hmac.compare_digest(signature, expected_signature)
 
 
 def normalize_headers(headers: Dict[str, str]) -> Dict[str, str]:
