Function token_matches 

fn token_matches(actual: &str, expected: &[u8; 32]) -> bool

Compares fixed-size digests without secret-length or matching-prefix shortcuts.

Hashing and request parsing still depend on the supplied token length. See https://docs.rs/subtle/latest/subtle/trait.ConstantTimeEq.html.