Проверка подписи

npm install tweetnacl

import nacl from 'tweetnacl';

export function verifyMiscordRequest(req, rawBody, publicKeyHex) {
  const signature = req.headers['x-signature-ed25519'];
  const timestamp = req.headers['x-signature-timestamp'];

  if (!signature || !timestamp) return false;

  const message = Buffer.concat([
    Buffer.from(timestamp),
    Buffer.from(rawBody),
  ]);

  return nacl.sign.detached.verify(
    message,
    Buffer.from(signature, 'hex'),
    Buffer.from(publicKeyHex, 'hex'),
  );
}

pip install cryptography

from cryptography.exceptions import InvalidSignature
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey


def verify_miscord_request(signature, timestamp, raw_body, public_key_hex):
    try:
        public_key = Ed25519PublicKey.from_public_bytes(
            bytes.fromhex(public_key_hex)
        )
        public_key.verify(
            bytes.fromhex(signature),
            timestamp.encode("utf-8") + raw_body,
        )
        return True
    except (ValueError, InvalidSignature):
        return False