WebCrypto JS SHA256 HMAC不匹配

async function generateHMAC(key, data) {
  const encoder = new TextEncoder();
  const keyBuffer = encoder.encode(key);
  const dataBuffer = encoder.encode(data);

  const cryptoKey = await window.crypto.subtle.importKey(
    'raw',
    keyBuffer,
    { name: 'HMAC', hash: { name: 'SHA-256' } },
    false,
    ['sign']
  );

  const signature = await window.crypto.subtle.sign('HMAC', cryptoKey, dataBuffer);
  return signature;
}

async function verifyHMAC(key, data, signature) {
  const encoder = new TextEncoder();
  const keyBuffer = encoder.encode(key);
  const dataBuffer = encoder.encode(data);

  const cryptoKey = await window.crypto.subtle.importKey(
    'raw',
    keyBuffer,
    { name: 'HMAC', hash: { name: 'SHA-256' } },
    false,
    ['verify']
  );

  const isValid = await window.crypto.subtle.verify('HMAC', cryptoKey, signature, dataBuffer);
  return isValid;
}

// 示例用法
(async () => {
  const key = 'my-secret-key';
  const data = 'Hello, World!';
  const signature = await generateHMAC(key, data);
  console.log('Generated HMAC:', signature);

  const isValid = await verifyHMAC(key, data, signature);
  console.log('HMAC Verification:', isValid);
})();