nyjRddlZddlZddlmZdZdededefdZdedededefd Z dS) N)settingszsurat-verify-v1surat_idno_suratreturnctd|d|}tjtj|t jddS)uHMAC signature binding a surat's id + no_surat, used as the QR token. Recomputed on every response — not stored — so it always reflects the current no_surat (regenerated no_surat invalidates old QR codes/links). :N) _NAMESPACEencodehmacnewr JWT_SECREThashlibsha256 hexdigest)rrmsgs A/var/www/html/jarvis.com/web/backend/app/services/surat_verify.py sign_suratr sh  / /( / /X / / 6 6 8 8C 8H'..00#w~ F F P P R RSVTVSV WWsigcLt||}tj||S)N)rr compare_digest)rrrexpecteds r verify_sigrs$(H--H  x - --r) r r app.configrr intstrrboolrrrr s   XXXXXXX...#.$......r