arona/PyRIGS
1
0
Fork 0
mirror of https://github.com/nottinghamtec/PyRIGS.git synced 2026-01-25 01:12:16 +00:00
Code Issues Projects Releases Wiki Activity

Okay, put that back where it was because I inavertently overloaded my import

Browse Source 
Flashbacks to my java days...
This commit is contained in:
FreneticScribbler
2023-06-27 00:48:25 +01:00
parent b5b8dc104c
commit 15230cb361
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
RIGS/views/rigboard.py
View File

@@ -409,8 +409,7 @@ class RecieveForumWebhook(generic.View):
return super().dispatch(request, *args, **kwargs) return super().dispatch(request, *args, **kwargs)
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
hmac = hmac.new(env('FORUM_WEBHOOK_SECRET').encode(), request.body, hashlib.sha256).hexdigest() computed = f"sha256={hmac.new(env('FORUM_WEBHOOK_SECRET').encode(), request.body, hashlib.sha256).hexdigest()}"
computed = f"sha256={hmac}"
print(computed) print(computed)
if not hmac.compare_digest(request.POST.get('X-Discourse-Event-Signature'), computed): if not hmac.compare_digest(request.POST.get('X-Discourse-Event-Signature'), computed):
return HttpResponseForbidden('Invalid signature header') return HttpResponseForbidden('Invalid signature header')