Rest API - Webhooks and Events
What is wrong with this JavaScript webhook signature verification code?
```javascript
const crypto = require('crypto');
const secret = 'key';
const payload = 'message';
const signature = 'abc';
const hmac = crypto.createHmac('sha256', secret);
hmac.update(payload);
const digest = hmac.digest('hex');
if (digest === signature) {
console.log('Valid');
} else {
console.log('Invalid');
}
```