mirror of
https://github.com/FAUSheppy/simple-webhook-handler
synced 2025-12-06 04:11:35 +01:00
127 lines
4.3 KiB
Python
Executable File
127 lines
4.3 KiB
Python
Executable File
#!/usr/bin/python3
|
|
import flask
|
|
import sys
|
|
import argparse
|
|
import json
|
|
import os
|
|
import subprocess
|
|
import hashlib
|
|
import hmac
|
|
|
|
app = flask.Flask("webhook-listener")
|
|
app.config["EXEC_CONFIG"] = "webhook.config"
|
|
TOKEN_HEADER = "X-Gitlab-Token"
|
|
PROJECT_IDENTIFIER = "web_url"
|
|
SEPERATOR = ","
|
|
COMMENT_INDICATOR = "#"
|
|
config = {}
|
|
|
|
HTTP_FORBIDDEN = 401
|
|
HTTP_NOT_FOUND = 404
|
|
HTTP_UNPROCESSABLE = 422
|
|
HTTP_INTERNAL_ERR = 500
|
|
|
|
##### FRONTEND PATHS ########
|
|
@app.route('/', methods=["GET","POST"])
|
|
def rootPage():
|
|
if flask.request.method == "GET":
|
|
return "Webhook Listener ist running"
|
|
else:
|
|
data = flask.request.json
|
|
if data == None:
|
|
retString = "POST-request is missing payload."
|
|
print(retString)
|
|
return (retString, HTTP_UNPROCESSABLE)
|
|
|
|
print(json.dumps(flask.request.json, indent=4, sort_keys=True))
|
|
|
|
# check for project in request
|
|
project = None
|
|
githubMode = False
|
|
try:
|
|
if "project" in data: # gitlab
|
|
project = data["project"][PROJECT_IDENTIFIER]
|
|
if "repository" in data: #github
|
|
project = data["repository"]["html_url"]
|
|
githubMode = True
|
|
except KeyError:
|
|
retString = "Rejected: missing project/{} json path".format(PROJECT_IDENTIFIER)
|
|
print(retString)
|
|
return (retString, HTTP_UNPROCESSABLE)
|
|
|
|
# check for project in config #
|
|
if not project or project not in config:
|
|
retString = "Rejected: project not identified in config"
|
|
print(retString)
|
|
return (retString, HTTP_NOT_FOUND)
|
|
|
|
token, scriptName = config[project]
|
|
|
|
# check authentification #
|
|
GITHUB_HEADER = "X-Hub-Signature"
|
|
if githubMode:
|
|
if GITHUB_HEADER not in flask.request.headers:
|
|
retString = "{} not found in headers".format(GITHUB_HEADER)
|
|
print(retString)
|
|
return (retString, HTTP_FORBIDDEN)
|
|
else:
|
|
hmacRemote = flask.request.headers[GITHUB_HEADER]
|
|
hmacLocal = hmac.new(token.encode(), flask.request.data, hashlib.sha1).hexdigest()
|
|
hmacLocal = "sha1=" + hmacLocal
|
|
if not hmacLocal == hmacRemote:
|
|
retString = "Rejected: Hash found but is mismatch"
|
|
print(retString)
|
|
return (retString, HTTP_FORBIDDEN)
|
|
|
|
elif TOKEN_HEADER not in flask.request.headers:
|
|
retString = "Rejected: secret token not found in request"
|
|
print(retString)
|
|
return (retString, HTTP_FORBIDDEN)
|
|
elif token != flask.request.headers[TOKEN_HEADER]:
|
|
retString = "Rejected: secret token found but is mismatch"
|
|
print(retString)
|
|
return (retString, HTTP_FORBIDDEN)
|
|
|
|
# try to execute script #
|
|
try:
|
|
executeScript(scriptName)
|
|
except subprocess.CalledProcessError:
|
|
retString = "Failed: script execution on the server failed"
|
|
print(retString)
|
|
return (retString, HTTP_INTERNAL_ERR)
|
|
|
|
# signal successfull completion #
|
|
return ("Success", 200)
|
|
|
|
|
|
def executeScript(scriptName):
|
|
path = os.path.expanduser(scriptName)
|
|
subprocess.Popen(path)
|
|
|
|
def readExecutionConfig(configFile):
|
|
global config
|
|
with open(configFile, "r") as f:
|
|
for line in f:
|
|
line = line.strip("\n")
|
|
if line.startswith(COMMENT_INDICATOR):
|
|
continue
|
|
projectIdent, token, scriptName = line.split(SEPERATOR)
|
|
config.update({projectIdent:(token, scriptName)})
|
|
|
|
@app.before_first_request
|
|
def init():
|
|
readExecutionConfig(app.config["EXEC_CONFIG"])
|
|
|
|
if __name__ == "__main__":
|
|
|
|
parser = argparse.ArgumentParser(description="Simple Webhook listener", \
|
|
formatter_class=argparse.ArgumentDefaultsHelpFormatter)
|
|
|
|
parser.add_argument("-i", "--interface", default="0.0.0.0", help="Interface to listen on")
|
|
parser.add_argument("-p", "--port", default="5000", help="Port to listen on")
|
|
parser.add_argument("-c", default="webhook.config", help="Config for handling of webhooks")
|
|
args = parser.parse_args()
|
|
|
|
app.config["EXEC_CONFIG"] = args.c
|
|
app.run(host=args.interface, port=args.port)
|