From 44b4886592ae583b50d3eddefbf09ea711d11f70 Mon Sep 17 00:00:00 2001
From: Laurent Peuch <cortex@worlddomination.be>
Date: Tue, 5 Feb 2019 20:51:40 +0100
Subject: [PATCH] init

---
 requirements.txt |  1 +
 server.py        | 85 ++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 86 insertions(+)
 create mode 100644 requirements.txt
 create mode 100644 server.py

diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..fe6e629
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1 @@
+sanic
diff --git a/server.py b/server.py
new file mode 100644
index 0000000..bcf9dc5
--- /dev/null
+++ b/server.py
@@ -0,0 +1,85 @@
+import hmac
+import hashlib
+
+from sanic import Sanic
+from sanic.response import text
+from sanic.exceptions import abort
+
+
+app = Sanic()
+
+other_chans = {
+    "doc": "doc",
+}
+
+# TODO
+# * choper tous les templates de notification
+# * choper tous les evenements à suivre
+# * fusionner les 2
+# * déployer
+
+
+def notify(message, chan="dev"):
+    print(f"{chan} -> {message}")
+
+
+@app.route("/github", methods=['POST'])
+async def github(request):
+    secret = open("./github_webhook_secret", "r").read().strip()
+
+    # Only SHA1 is supported
+    header_signature = request.headers.get('X-Hub-Signature')
+    if header_signature is None:
+        print("no header X-Hub-Signature")
+        abort(403)
+
+    sha_name, signature = header_signature.split('=')
+    if sha_name != 'sha1':
+        print("signing algo isn't sha1, it's '%s'" % sha_name)
+        abort(501)
+
+    # HMAC requires the key to be bytes, but data is string
+    mac = hmac.new(str(secret), msg=request.data, digestmod=hashlib.sha1)
+
+    if not hmac.compare_digest(str(mac.hexdigest()), str(signature)):
+        abort(403)
+
+    hook_type = request.headers.get("X-Github-Event")
+
+    print(f"Hook type: {hook_type}")
+
+    if hook_type == "push":
+        repository = request.json["repository"]["name"]
+        commits = request.json["commits"]
+        user = request.json["pusher"]["name"]
+        branch = request.json["ref"].split("/", 2)[2]
+
+        if len(commits) == 1:
+            url = commits[0]["url"]
+            notify(f"[{repository}] @{user} pushed {len(commits)} to {branch}: {url}")
+        else:
+            url = request.json["compare"]
+            notify(f"[{repository}] @{user} pushed {len(commits)}s to {branch}: {url}")
+            for commit in commits:
+                author = commit["author"]
+                commit_message = commit["message"]
+                notify(f"[{repository}/{branch}] {commit_message} - {author}")
+
+"""
+2019-01-30 15:26:41 yunobridge <GitBot> [yunohost] @alexAubin commented on issue #636: >you can completly remove the CCC server... https://github.com/YunoHost/yunohost/pull/636#issuecomment-458962632
+"""
+
+    # if hook_type == "pull_request":
+        # project = request.json["repository"]["name"]
+        # number = request.json["pull_request"]["number"]
+
+        # print("reimporting pr %s#%s" % (project, number))
+
+
+@app.route("/")
+async def index(request):
+    return text("Webhooks server.")
+
+
+if __name__ == '__main__':
+    app.run('localhost', port="4567", debug=True)