Webhook Security

  const signature = req.headers['x-appwrite-webhook-signature'];
  
  if (!signature) {
      return res.json({ error: "Bad signature request" });
  }
  // Create expected signature
  const expectedSignature = crypto.createHmac('sha1', process.env.WEBHOOK_SIG_KEY)
      .update(`${process.env.WEBHOOK_ENDPOINT}${JSON.stringify(payload)}`)
      .digest('base64');

  // Securely compare the signatures
  if (!crypto.timingSafeEqual(Buffer.from(expectedSignature, 'base64'), Buffer.from(signature, 'base64'))) 
  {
      return res.json({ error: "Unauthorized" });
  }...```

Is this enough to keep my webhook secure?