0001-compare-hmac-signature-with-lower-case-10617.patch

Serghei Mihai, 12 avril 2016 10:49

Voir les différences: en ligne côte à côte

Subject: [PATCH] compare hmac signature with lower case (#10617)

 ckanext/ozwillo_organization_api/plugin.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

                         computed_hmac = hmac.new(api_secret, request.body, sha1).hexdigest()
                         # the received hmac is uppercase according to
                         # http://doc.ozwillo.com/#ref-3-2-1
                         if received_hmac != computed_hmac.upper():
                         if received_hmac.lower() != computed_hmac:
                             log.info('Invalid HMAC')
                             raise logic.NotAuthorized(_('Invalid HMAC'))
                     else:
+    -

Ozwillo