lynnesbian/FediBooks
lynnesbian/FediBooks
1
0
Fork 0
mirror of https://github.com/Lynnesbian/FediBooks/ synced 2024-11-25 08:38:59 +00:00
Code Issues Releases Wiki Activity

decrypt incoming push objects

Browse source
This commit is contained in:
Lynne Megido 2019-09-11 14:15:26 +10:00
parent 8e5538dc7d
commit 7e1393e7b9
1 changed files with 18 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
webui.py
View file

@ -489,10 +489,25 @@ def do_authenticate_bot():
session['step'] = 4
return redirect(url_for("bot_create"), 303)
@app.route("/push/<id>")
@app.route("/push/<id>", methods = ['POST'])
def push(id):
c = db.cursor()
print(request.form)
c = mysql.connection.cursor()
c.execute("SELECT client_id, client_secret, secret FROM credentials WHERE id = (SELECT credentials_id FROM bots WHERE handle = %s)", (id,))
login = c.fetchone()
client = Mastodon(
client_id = login[0],
client_secret = login[1],
access_token = login[2],
api_base_url = "https://{}".format(id.split("@")[2])
)
c.execute("SELECT push_private_key, push_secret FROM bots WHERE handle = %s", (id,))
p = c.fetchone()
params = {
'privkey': int(p[0].rstrip("\0")),
'auth': p[1]
}
push_object = client.push_subscription_decrypt_push(request.data, params, request.headers['Encryption'], request.headers['Crypto-Key'])
@app.route("/do/signup", methods=['POST'])
def do_signup():