allow for own upload

DARPA-CRITICALMAAS · May 1, 2024 · 1209a39 · 1209a39
1 parent c9b7476
commit 1209a39
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/cdrhook/server.py b/cdrhook/server.py
@@ -169,8 +169,10 @@ def hook():
     Our main entry point for CDR calls
     """
     # check the signature
-    #if request.headers.get("x-cdr-signature-256"):
-    validate_request(request.data, request.headers.get("x-cdr-signature-256"), config["callback_secret"])
+    if request.headers.get("x-cdr-signature-256"):
+       validate_request(request.data, request.headers.get("x-cdr-signature-256"), config["callback_secret"])
+    elif not request.headers.get("x-cdr-signature-256") == config["callback_secret"]:
+        abort(403, "Request signatures didn't match!")
 
     send_message(request.get_json(), f'{config["prefix"]}cdrhook')
     return {"ok": "success"}