Waleed Latif 3d4be6dce5 refactor(security): consolidate HMAC-SHA256 primitives into @sim/security ...

Adds hmacSha256Hex and hmacSha256Base64 to @sim/security/hmac and migrates
15 webhook providers plus 5 other hot paths (deployment token signing,
outbound webhook requests, workspace notification delivery, notification
test route, Shopify OAuth callback) off bare `createHmac` calls. Secret
parameter accepts `string | Buffer` to cover base64-decoded Svix-style
secrets (Resend) and MS Teams' HMAC scheme. AWS SigV4 signing in S3 and
Textract tools intentionally retains direct `createHmac` usage — its
multi-step key derivation chain doesn't fit a generic helper.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-22 22:08:58 -07:00

..

docs

fix(docs): update simstudio.ai URLs to sim.ai in SSO docs (#4257)

2026-04-21 21:18:32 -07:00

realtime

chore(repo): rebase fixes and quality improvements for realtime split

2026-04-22 21:15:16 -07:00

sim

refactor(security): consolidate HMAC-SHA256 primitives into @sim/security

2026-04-22 22:08:58 -07:00