Skip to content

Instantly share code, notes, and snippets.

@wasdee
Forked from adrienjoly/fb_helpers.py
Created October 6, 2020 07:28
Show Gist options
  • Save wasdee/fd88fb0f530a459da53cbeaa028ba2e3 to your computer and use it in GitHub Desktop.
Save wasdee/fd88fb0f530a459da53cbeaa028ba2e3 to your computer and use it in GitHub Desktop.
facebook signed_request parsing in python
import base64
import hashlib
import hmac
import simplejson as json
def base64_url_decode(inp):
padding_factor = (4 - len(inp) % 4) % 4
inp += "="*padding_factor
return base64.b64decode(unicode(inp).translate(dict(zip(map(ord, u'-_'), u'+/'))))
def parse_signed_request(signed_request, secret):
l = signed_request.split('.', 2)
encoded_sig = l[0]
payload = l[1]
sig = base64_url_decode(encoded_sig)
data = json.loads(base64_url_decode(payload))
if data.get('algorithm').upper() != 'HMAC-SHA256':
log.error('Unknown algorithm')
return None
else:
expected_sig = hmac.new(secret, msg=payload, digestmod=hashlib.sha256).digest()
if sig != expected_sig:
return None
else:
log.debug('valid signed request received..')
return data
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment