mirror of
https://github.com/zhayujie/chatgpt-on-wechat.git
synced 2026-07-17 19:27:11 +08:00
34 lines
1.0 KiB
Python
34 lines
1.0 KiB
Python
import web
|
|
from wechatpy.crypto import WeChatCrypto
|
|
from wechatpy.exceptions import InvalidSignatureException
|
|
from wechatpy.utils import check_signature
|
|
|
|
from config import conf
|
|
|
|
MAX_UTF8_LEN = 2048
|
|
|
|
|
|
class WeChatAPIException(Exception):
|
|
pass
|
|
|
|
|
|
def verify_server(data):
|
|
try:
|
|
signature = data.signature
|
|
timestamp = data.timestamp
|
|
nonce = data.nonce
|
|
echostr = data.get("echostr", None)
|
|
token = conf().get("wechatmp_token") # 请按照公众平台官网\基本配置中信息填写
|
|
# Reject when token is empty: an empty token reduces signature verification
|
|
# to a predictable hash over attacker-controlled values.
|
|
if not token:
|
|
raise web.Forbidden("wechatmp_token is not configured")
|
|
check_signature(token, signature, timestamp, nonce)
|
|
return echostr
|
|
except InvalidSignatureException:
|
|
raise web.Forbidden("Invalid signature")
|
|
except web.Forbidden:
|
|
raise
|
|
except Exception as e:
|
|
raise web.Forbidden(str(e))
|