mirrors/webhook
1
0
Fork 0
mirror of https://github.com/adnanh/webhook.git synced 2025-05-12 00:24:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

added support for secrets

Browse source
This commit is contained in:
Adnan Hajdarevic 2015-01-15 16:27:54 +01:00
parent be543f4005
commit 179367a28d
1 changed files with 27 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
webhook.go
View file

@ -4,6 +4,7 @@ import (
"encoding/json"
"flag"
"fmt"
"io/ioutil"
"net/http"
"os/exec"
"time"
@ -12,6 +13,9 @@ import (
"github.com/go-martini/martini"
"crypto/hmac"
"crypto/sha256"
l4g "code.google.com/p/log4go"
)
@ -78,13 +82,34 @@ func hookHandler(req *http.Request, params martini.Params) string {
}
}
go func(id string, params interface{}) {
body, err := ioutil.ReadAll(req.Body)
if err != nil {
l4g.Warn("Error occurred while trying to read the request body: %s", err)
}
go func(id string, body []byte, signature string, params interface{}) {
if hook := webhooks.Match(id, params); hook != nil {
if hook.Secret != "" {
if signature == "" {
l4g.Error("Hook %s got matched, but the request contained invalid signature.", hook.ID)
return
}
mac := hmac.New(sha256.New, []byte(hook.Secret))
mac.Write(body)
expectedMAC := mac.Sum(nil)
if !hmac.Equal([]byte(signature), expectedMAC) {
l4g.Error("Hook %s got matched, but the request contained invalid signature. Expected %s, got %s.", hook.ID, signature, expectedMAC)
return
}
}
cmd := exec.Command(hook.Command, "", "", hook.Cwd)
out, _ := cmd.Output()
l4g.Info("Hook %s triggered successfully! Command output:\n%s", hook.ID, out)
}
}(params["id"], p)
}(params["id"], body, req.Header.Get("X-Hub-Signature"), p)
return "Got it, thanks. :-)"
}