浏览代码

[fix] test for unsubscribe

version-14
Rushabh Mehta 9 年前
父节点
当前提交
c61bae3659
共有 1 个文件被更改,包括 10 次插入6 次删除
  1. +10
    -6
      frappe/utils/verified_command.py

+ 10
- 6
frappe/utils/verified_command.py 查看文件

@@ -25,19 +25,23 @@ def get_secret():


def verify_request(): def verify_request():
"""Verify if the incoming signed request if it is correct.""" """Verify if the incoming signed request if it is correct."""
query_string = frappe.request.query_string if hasattr(frappe.request, "query_string") \
else frappe.local.flags.signed_query_string
query_string = frappe.local.flags.signed_query_string or \
getattr(frappe.request, 'query_string', None) \


params, signature = query_string.split("&_signature=")
valid = False


given_signature = hmac.new(params.encode("utf-8"))
if '&_signature=' in query_string:
params, signature = query_string.split("&_signature=")


given_signature.update(get_secret())
valid = signature == given_signature.hexdigest()
given_signature = hmac.new(params.encode("utf-8"))

given_signature.update(get_secret())
valid = signature == given_signature.hexdigest()


if not valid: if not valid:
frappe.respond_as_web_page(_("Invalid Link"), frappe.respond_as_web_page(_("Invalid Link"),
_("This link is invalid or expired. Please make sure you have pasted correctly.")) _("This link is invalid or expired. Please make sure you have pasted correctly."))

return valid return valid


def get_url(cmd, params, nonce=None, secret=None): def get_url(cmd, params, nonce=None, secret=None):


正在加载...
取消
保存