Just use crypto.timingSafeEqual()
Safe, constant-time comparison of Buffers.
npm install scmp
To minimize vulnerability against timing attacks.
const scmp = require('scmp');
const hash = Buffer.from('e727d1464ae12436e899a726da5b2f11d8381b26', 'hex');
const givenHash = Buffer.from('e727e1b80e448a213b392049888111e1779a52db', 'hex');
if (scmp(hash, givenHash)) {
console.log('good hash');
} else {
console.log('bad hash');
}