const rawBody = request.body.toString('utf8');
    const signature = request.get('X-Signature');

    console.log('Raw Body:', rawBody);
    console.log('Signature:', signature);

    if (!signature) {
      throw new HttpError(400, 'Lemon Squeezy Webhook Signature Not Provided');
    }

    const secret = requireNodeEnvVar('LEMONSQUEEZY_WEBHOOK_SECRET');

    
    console.log('Secret Length:', secret.length); // Avoid logging actual secret

    const hmac = crypto.createHmac('sha256', secret);
    const digest = Buffer.from(hmac.update(rawBody).digest('hex'), 'utf8');

    console.log('Computed HMAC:', hmac.digest('hex')); // Log the HMAC value

    // Additional logging for debugging
    console.log('Computed Digest:', digest.toString());
    console.log('Received Signature:', signature);
    console.log('Signature Comparison:', crypto.timingSafeEqual(Buffer.from(signature, 'utf8'), digest));

    if (!crypto.timingSafeEqual(Buffer.from(signature, 'utf8'), digest)) {
      throw new HttpError(400, 'Invalid signature');
    }

const rawBody = request.body.toString('utf8');
    const signature = request.get('X-Signature');

    console.log('Raw Body:', rawBody);
    console.log('Signature:', signature);

    if (!signature) {
      throw new HttpError(400, 'Lemon Squeezy Webhook Signature Not Provided');
    }

    const secret = requireNodeEnvVar('LEMONSQUEEZY_WEBHOOK_SECRET');

    
    console.log('Secret Length:', secret.length); // Avoid logging actual secret

    const hmac = crypto.createHmac('sha256', secret);
    const digest = Buffer.from(hmac.update(rawBody).digest('hex'), 'utf8');

    console.log('Computed HMAC:', hmac.digest('hex')); // Log the HMAC value

    // Additional logging for debugging
    console.log('Computed Digest:', digest.toString());
    console.log('Received Signature:', signature);
    console.log('Signature Comparison:', crypto.timingSafeEqual(Buffer.from(signature, 'utf8'), digest));

    if (!crypto.timingSafeEqual(Buffer.from(signature, 'utf8'), digest)) {
      throw new HttpError(400, 'Invalid signature');
    }