feat: verify server when receive message in wechatmp

tudou2 · Apr 21, 2023 · b5df6fa · b5df6fa
1 parent 7cefe2d
commit b5df6fa
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/channel/wechatmp/active_reply.py b/channel/wechatmp/active_reply.py
@@ -21,6 +21,7 @@ def POST(self):
         # Make sure to return the instance that first created, @singleton will do that.
         channel = WechatMPChannel()
         try:
+            verify_server(web.input())
             message = web.data() # todo crypto
             # logger.debug("[wechatmp] Receive request:\n" + webData.decode("utf-8"))
             msg = parse_message(message)

diff --git a/channel/wechatmp/passive_reply.py b/channel/wechatmp/passive_reply.py
@@ -20,6 +20,7 @@ def GET(self):
 
     def POST(self):
         try:
+            verify_server(web.input())
             request_time = time.time()
             channel = WechatMPChannel()
             message = web.data() # todo crypto