Raise exception if not using webhook secret

This commit is contained in:
José Padilla
2013-04-14 19:32:28 -04:00
parent 3496b206a0
commit e2b36b1dde

View File

@@ -90,6 +90,10 @@ class DjrillWebhookSecretMixin(object):
secret = getattr(settings, 'DJRILL_WEBHOOK_SECRET', None)
secret_name = getattr(settings, 'DJRILL_WEBHOOK_SECRET_NAME', 'secret')
if secret is None:
raise ImproperlyConfigured(
"You have not set DJRILL_WEBHOOK_SECRET in the settings file.")
if request.GET.get(secret_name) != secret:
return HttpResponse(status=403)