1 files changed, 55 insertions, 0 deletions
diff --git a/src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java b/src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java
new file mode 100644
index 00000000..c961dec9
--- /dev/null
+++ b/src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java
@@ -0,0 +1,55 @@
+/*
+ * Copyright (C) 2008-2023, Juick
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package com.juick.www.api.webhooks;
+
+import com.juick.util.HttpForbiddenException;
+import org.apache.commons.codec.digest.HmacUtils;
+import org.apache.commons.io.IOUtils;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.http.HttpStatus;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestHeader;
+import org.springframework.web.bind.annotation.ResponseStatus;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+
+@RestController
+public class PatreonWebhook {
+    private static final Logger logger = LoggerFactory.getLogger("Patreon");
+    @Value("${patreon_secret:}")
+    private String secretKey;
+
+    @PostMapping(value = "/api/_patreon")
+    @ResponseStatus(value = HttpStatus.OK)
+    public void processUpdate(
+            @RequestHeader(name = "X-Patreon-Event") String event,
+            @RequestHeader(name = "X-Patreon-Signature") String signature,
+            InputStream body) throws Exception {
+        String data = IOUtils.toString(body, StandardCharsets.UTF_8);
+        var actualSignature = HmacUtils.hmacMd5Hex(secretKey, data);
+        logger.info("Event: {}, signature: {}, actual: {}", event, signature, actualSignature);
+        if (!actualSignature.equals(signature)) {
+            throw new HttpForbiddenException();
+        }
+        logger.info("Data: " + data);
+    }
+}