1
1
mirror of https://github.com/kokonect-link/cherrypick synced 2024-12-01 08:18:45 +09:00

[Server] Fix bug

This commit is contained in:
syuilo 2017-02-12 06:39:37 +09:00
parent 5149c4cea8
commit e0703e0a50

View File

@ -1,5 +1,6 @@
import * as EventEmitter from 'events';
import * as express from 'express';
const crypto = require('crypto');
import User from '../models/user';
import config from '../../conf';
@ -20,7 +21,7 @@ module.exports = async (app: express.Application) => {
const handler = new EventEmitter();
app.post('/hooks/github', (req, res, next) => {
if (req.headers['x-hub-signature'] == config.github_bot.hook_secret) {
if ((new Buffer(req.headers['x-hub-signature'])).equals(new Buffer('sha1=' + crypto.createHmac('sha1', config.github_bot.hook_secret).update(JSON.stringify(req.body)).digest('hex')))) {
handler.emit(req.headers['x-github-event'], req.body);
} else {
res.sendStatus(400);