فهرست منبع

hash signing secret

itizawa 5 سال پیش
والد
کامیت
0eb3cd1d67
1فایلهای تغییر یافته به همراه9 افزوده شده و 0 حذف شده
  1. 9 0
      src/server/routes/apiv3/slack-bot.js

+ 9 - 0
src/server/routes/apiv3/slack-bot.js

@@ -1,5 +1,6 @@
 
 
 const express = require('express');
 const express = require('express');
+const crypto = require('crypto');
 
 
 const loggerFactory = require('@alias/logger');
 const loggerFactory = require('@alias/logger');
 
 
@@ -39,6 +40,14 @@ module.exports = (crowi) => {
     console.log(timestamp);
     console.log(timestamp);
     const sigBaseString = `v0:${timestamp}:${req.body}`;
     const sigBaseString = `v0:${timestamp}:${req.body}`;
     console.log(sigBaseString);
     console.log(sigBaseString);
+    const signingSecret = crowi.configManager.getConfig('crowi', 'slackbot:signingSecret');
+
+    const hasher = crypto.createHmac('sha256', signingSecret);
+    hasher.update(sigBaseString, 'utf8');
+    const hashedSigningSecret = hasher.digest('hex');
+
+    const mySignature = `v0=${hashedSigningSecret}`;
+    console.log(mySignature);
 
 
     return next();
     return next();
   }
   }