-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove headers from signature verification if gitlab invocation method #29
Remove headers from signature verification if gitlab invocation method #29
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would rather add CONTRIBUTING.md on how to test it with environment variables
app/invokers/webhook_invoker.py
Outdated
@@ -295,8 +297,12 @@ def validate_incoming_signature(self, msg: dict) -> bool: | |||
return False | |||
|
|||
# Remove the headers to avoid them being used in the signature verification |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lets update the comment
app/core/config.py
Outdated
load_dotenv() | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would do it if specific env
variable is specified . e.g. if ENV_RUNTIME='DEBUG'
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
left 1 comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
love that, great job with the CONTRIBUTING.md
Description
What - Remove headers from signature verification if gitlab invocation method
Why - Gitlab invocation method doesn't send other headers than port's headers
Type of change
Please leave one option from the following and delete the rest: