hosting/ynh-apps_tools
1
0
Fork 0
Code Activity

README-generator: fix legacy sanic 'abort' + pip dependency hell

Browse source
This commit is contained in:
Alexandre Aubin 2023-10-31 16:04:28 +01:00
parent 947de7b380
commit 8b7b486902
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
README-generator/requirements.txt
View file

@ -2,3 +2,4 @@ jinja2
sanic==21.12.2 sanic==21.12.2
pyyaml pyyaml
toml toml
websockets==10.0

9
README-generator/webhook.py
View file

@ -5,9 +5,8 @@ import hashlib
import asyncio import asyncio
import tempfile import tempfile
from sanic import Sanic from sanic import Sanic, response
from sanic.response import text from sanic.response import text
from sanic.exceptions import abort
from make_readme import generate_READMEs from make_readme import generate_READMEs
@ -50,18 +49,18 @@ async def on_push(request):
header_signature = request.headers.get("X-Hub-Signature") header_signature = request.headers.get("X-Hub-Signature")
if header_signature is None: if header_signature is None:
print("no header X-Hub-Signature") print("no header X-Hub-Signature")
abort(403) return response.json({"error": "No X-Hub-Signature"}, 403)
sha_name, signature = header_signature.split("=") sha_name, signature = header_signature.split("=")
if sha_name != "sha1": if sha_name != "sha1":
print("signing algo isn't sha1, it's '%s'" % sha_name) print("signing algo isn't sha1, it's '%s'" % sha_name)
abort(501) return response.json({"error": "Signing algorightm is not sha1 ?!"}, 501)
# HMAC requires the key to be bytes, but data is string # HMAC requires the key to be bytes, but data is string
mac = hmac.new(github_webhook_secret.encode(), msg=request.body, digestmod=hashlib.sha1) mac = hmac.new(github_webhook_secret.encode(), msg=request.body, digestmod=hashlib.sha1)
if not hmac.compare_digest(str(mac.hexdigest()), str(signature)): if not hmac.compare_digest(str(mac.hexdigest()), str(signature)):
abort(403) return response.json({"error": "Bad signature ?!"}, 403)
data = request.json data = request.json