verify_weebly_install_params

gistfile1.py

import hashlib
import hmac


def verify_weebly_install_params(params, secret):
    """
    Verifies the hmac of params on the Weebly install URL.
    """

    # https://dev.weebly.com/oauth2.html
    #
    # [MANIFEST_CALLBACK_URL]?user_id=[USER_ID]&timestamp=[TIMESTAMP]&site_id=[SITE_ID]&hmac=[HMAC-SHA256]
    #
    # $hash_string = "user_id=[USER_ID]&timestamp=[TIMESTAMP]&site_id=[SITE_ID]";
    # $hash = hash_hmac('sha256', $hash_string, SECRET_KEY);

    message = '&'.join('{}={}'.format(k, params.get(k, ''))
                       for k in ['user_id', 'timestamp', 'site_id'])

    h = hmac.new(secret.encode('ascii'),
                 message.encode('ascii', 'ignore'),
                 hashlib.sha256)

    return h.hexdigest() == params.get('hmac')

This works like a charm..thanks @agriffis