|
@@ -23,8 +23,8 @@ def index():
|
|
|
@app.route('/deploy', methods=['POST'])
|
|
@app.route('/deploy', methods=['POST'])
|
|
|
def deploy():
|
|
def deploy():
|
|
|
"""Run deploy script"""
|
|
"""Run deploy script"""
|
|
|
- digest = hmac.new(secret, request.data, hashlib.sha1).hexdigest()
|
|
|
|
|
- signature = request.headers['X-Gogs-Signature'].split('=', 1)
|
|
|
|
|
|
|
+ digest = hmac.new(secret, request.data, hashlib.sha256).hexdigest()
|
|
|
|
|
+ signature = request.headers['X-Gogs-Signature']
|
|
|
if len(signature) < 2 or not hmac.compare_digest(signature, digest):
|
|
if len(signature) < 2 or not hmac.compare_digest(signature, digest):
|
|
|
abort(400, 'Invalid signature')
|
|
abort(400, 'Invalid signature')
|
|
|
|
|
|
