apikey_example.py

import hmac
import hashlib

def get_secret(key, message):
    hashed = hmac.new(key.encode('utf-8'), message, hashlib.sha256).hexdigest()
    return hashed

def get_github_secret(key, message):
    hashed = hmac.new(key.encode('utf-8'), message, hashlib.sha1).hexdigest()
    return hashed
    
def validate_key():

    access_token = config('SECRET_TOKEN')

    payloadbody = request._get_body_string()

    #This process the payload and the access token to check if it's a valid request
    access_hash = get_secret(access_token, payloadbody)

    if request.get_header('X-Hub-Signature') == access_hash:
        print("access granted")
    else:
        print("Invalid api key")