Challenge.verify

Verifies that a Challenge ID matches the expected HMAC for the given parameters.

Use the same server-managed secret that produced the Challenge ID.

Usage

import { Challenge } from 'mppx'
 
const secretKey = process.env.MPP_SECRET_KEY!
 
const challenge = Challenge.from({
  intent: 'charge',
  method: 'tempo',
  realm: 'mpp.dev',
  request: { amount: '1000000', currency: '0x...', recipient: '0x...' },
  secretKey,
})
 
const isValid = Challenge.verify(challenge, { secretKey })
// => true

Return type

type ReturnType = boolean

true if the Challenge ID is valid, false otherwise.

Parameters

challenge

• Type: Challenge

The Challenge to verify.

options

secretKey

• Type: string

Server secret for HMAC-bound Challenge ID verification. Keep it server-side and load it from your environment or secret manager.