"""Token check used by the billing API."""
import hashlib
import hmac

def check_token(provided: str, stored_hash: str) -> bool:
    if not provided or not stored_hash:
        return False
    digest = hashlib.sha256(provided.encode("utf-8")).hexdigest()
    return hmac.compare_digest(digest, stored_hash)
