arona/PyRIGS
1
0
Fork 0
mirror of https://github.com/nottinghamtec/PyRIGS.git synced 2026-01-30 20:02:16 +00:00
Code Issues Projects Releases Wiki Activity

Different header access method

Browse Source
This commit is contained in:
FreneticScribbler
2023-06-27 00:55:04 +01:00
parent 15230cb361
commit ac15ab3729
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
RIGS/views/rigboard.py
View File

@@ -411,7 +411,7 @@ class RecieveForumWebhook(generic.View):
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
computed = f"sha256={hmac.new(env('FORUM_WEBHOOK_SECRET').encode(), request.body, hashlib.sha256).hexdigest()}" computed = f"sha256={hmac.new(env('FORUM_WEBHOOK_SECRET').encode(), request.body, hashlib.sha256).hexdigest()}"
print(computed) print(computed)
if not hmac.compare_digest(request.POST.get('X-Discourse-Event-Signature'), computed): if not hmac.compare_digest(request.headers.get('X-Discourse-Event-Signature'), computed):
return HttpResponseForbidden('Invalid signature header') return HttpResponseForbidden('Invalid signature header')
body = json.loads(request.body.decode('utf-8')) body = json.loads(request.body.decode('utf-8'))
event_id = int(body['title'][1:5]) # find the ID, force convert it to an int to eliminate leading zeros event_id = int(body['title'][1:5]) # find the ID, force convert it to an int to eliminate leading zeros