From 04956b9c6c32ddd736fe32dff825635d4af74ae0 Mon Sep 17 00:00:00 2001 From: Vitaly Takmazov Date: Tue, 20 Jun 2023 01:03:50 +0300 Subject: Patreon webhook (WIP) --- src/main/java/com/juick/config/SecurityConfig.java | 2 +- .../com/juick/www/api/webhooks/PatreonWebhook.java | 55 ++++++++++++++++++++++ 2 files changed, 56 insertions(+), 1 deletion(-) create mode 100644 src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java diff --git a/src/main/java/com/juick/config/SecurityConfig.java b/src/main/java/com/juick/config/SecurityConfig.java index 70dc19fa..a8f54cfd 100644 --- a/src/main/java/com/juick/config/SecurityConfig.java +++ b/src/main/java/com/juick/config/SecurityConfig.java @@ -200,7 +200,7 @@ public class SecurityConfig { "/api/swagger-ui/**", "/api/messages/discussions", "/api/users", "/api/thread", "/api/tags", - "/api/tlgmbtwbhk", "/api/fbwbhk", + "/api/tlgmbtwbhk", "/api/fbwbhk", "/api/_patreon", "/api/skypebotendpoint", "/api/_fblogin", "/api/_vklogin", "/api/_tglogin", "/api/_google", "/api/_applelogin", "/api/signup", diff --git a/src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java b/src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java new file mode 100644 index 00000000..c961dec9 --- /dev/null +++ b/src/main/java/com/juick/www/api/webhooks/PatreonWebhook.java @@ -0,0 +1,55 @@ +/* + * Copyright (C) 2008-2023, Juick + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as + * published by the Free Software Foundation, either version 3 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see . + */ + +package com.juick.www.api.webhooks; + +import com.juick.util.HttpForbiddenException; +import org.apache.commons.codec.digest.HmacUtils; +import org.apache.commons.io.IOUtils; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.http.HttpStatus; +import org.springframework.web.bind.annotation.PostMapping; +import org.springframework.web.bind.annotation.RequestHeader; +import org.springframework.web.bind.annotation.ResponseStatus; +import org.springframework.web.bind.annotation.RestController; + +import java.io.InputStream; +import java.nio.charset.StandardCharsets; + +@RestController +public class PatreonWebhook { + private static final Logger logger = LoggerFactory.getLogger("Patreon"); + @Value("${patreon_secret:}") + private String secretKey; + + @PostMapping(value = "/api/_patreon") + @ResponseStatus(value = HttpStatus.OK) + public void processUpdate( + @RequestHeader(name = "X-Patreon-Event") String event, + @RequestHeader(name = "X-Patreon-Signature") String signature, + InputStream body) throws Exception { + String data = IOUtils.toString(body, StandardCharsets.UTF_8); + var actualSignature = HmacUtils.hmacMd5Hex(secretKey, data); + logger.info("Event: {}, signature: {}, actual: {}", event, signature, actualSignature); + if (!actualSignature.equals(signature)) { + throw new HttpForbiddenException(); + } + logger.info("Data: " + data); + } +} -- cgit v1.2.3