arona/PyRIGS
1
0
Fork 0
mirror of https://github.com/nottinghamtec/PyRIGS.git synced 2026-01-29 03:12:15 +00:00
Code Issues Projects Releases Wiki Activity

Try again at signing

Browse Source
This commit is contained in:
FreneticScribbler
2023-06-27 00:05:30 +01:00
parent 32c8573c71
commit f76222763d
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
RIGS/views/rigboard.py
View File

@@ -4,6 +4,7 @@ import re
import premailer import premailer
import simplejson import simplejson
import urllib import urllib
import hmac
from envparse import env from envparse import env
from bs4 import BeautifulSoup from bs4 import BeautifulSoup
@@ -407,8 +408,8 @@ class RecieveForumWebhook(generic.View):
return super().dispatch(request, *args, **kwargs) return super().dispatch(request, *args, **kwargs)
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
signer = signing.Signer(key=env('FORUM_WEBHOOK_SECRET')) computed = f"sha256={hmac.new(env('FORUM_WEBHOOK_SECRET'), request.body).hexdigest()}"
if request.POST.get('X-Discourse-Event-Signature') == signer.sign(request.body): if request.POST.get('X-Discourse-Event-Signature') == computed: # and request.POST.get('X-Discourse-Event') == "topic_created":
body = json.loads(request.body.decode('utf-8')) body = json.loads(request.body.decode('utf-8'))
event_id = int(body['title'][1:5]) # find the ID, force convert it to an int to eliminate leading zeros event_id = int(body['title'][1:5]) # find the ID, force convert it to an int to eliminate leading zeros
event = models.Event.objects.filter(pk=event_id).first() event = models.Event.objects.filter(pk=event_id).first()