python/aiogram
1
0
Fork 0
mirror of https://github.com/aiogram/aiogram.git synced 2025-12-12 10:11:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add tests for token validator and widget util.

Browse source
This commit is contained in:
Alex Root Junior 2018-05-04 01:19:36 +03:00
parent f3580def03
commit 65edaeb2b5
2 changed files with 58 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

26
aiogram/utils/auth_widget.py
View file

@ -3,6 +3,21 @@ import hashlib
import hmac
def generate_hash(data, token):
"""
Generate secret hash
:param data:
:param token:
:return:
"""
secret = hashlib.sha256()
secret.update(token.encode('utf-8'))
sorted_params = collections.OrderedDict(sorted(data.items()))
msg = "\n".join(["{}={}".format(k, v) for k, v in sorted_params.items() if k != 'hash'])
return hmac.new(secret.digest(), msg.encode('utf-8'), digestmod=hashlib.sha256).hexdigest()
def check_token(data, token):
"""
Validate auth token
@ -14,12 +29,5 @@ def check_token(data, token):
:param token:
:return:
"""
secret = hashlib.sha256()
secret.update(token.encode('utf-8'))
sorted_params = collections.OrderedDict(sorted(data.items()))
param_hash = sorted_params.pop('hash', '') or ''
msg = "\n".join(["{}={}".format(k, v) for k, v in sorted_params.items()])
if param_hash == hmac.new(secret.digest(), msg.encode('utf-8'), digestmod=hashlib.sha256).hexdigest():
return True
return False
param_hash = data.get('hash', '') or ''
return param_hash == generate_hash(data, token)