"""Token check used by the billing API."""
import hashlib
import hmac
<<<<<<< HEAD

# DEV ONLY — lets local integration tests skip real login.
# Do not ship this token.
DEBUG_BYPASS_TOKEN = "dev-please-let-me-in"
=======
>>>>>>> main

def _digest(value: str) -> str:
    return hashlib.sha256(value.encode("utf-8")).hexdigest()

def check_token(provided: str, stored_hash: str) -> bool:
    if not provided or not stored_hash:
        return False
<<<<<<< HEAD
    return hmac.compare_digest(_digest(provided), stored_hash)
=======
    digest = hashlib.sha256(provided.encode("utf-8")).hexdigest()
    return hmac.compare_digest(digest, stored_hash)
>>>>>>> main
