I asked ChatGPT for an hmac verifier in node. It gave me a timing-attack vulnerable comparison. Then I rediscovered that node lacks a constant time equality primitive double hashing for randomized time eq is the best you can do. Chat GPT is just as lazy as the rest of us :)