flagsmith 3.8.0__tar.gz → 3.9.0__tar.gz

{flagsmith-3.8.0 → flagsmith-3.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: flagsmith
-Version: 3.8.0
+Version: 3.9.0
 Summary: Flagsmith Python SDK
 License: BSD3
 Keywords: feature,flag,flagsmith,remote,config
@@ -12,7 +12,6 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
 Requires-Dist: flagsmith-flag-engine (>=5.1.0,<6.0.0)
 Requires-Dist: pydantic (>=2,<3)
 Requires-Dist: requests (>=2.32.3,<3.0.0)

flagsmith-3.9.0/flagsmith/__init__.py

@@ -0,0 +1,4 @@
+from . import webhooks
+from .flagsmith import Flagsmith
+
+__all__ = ("Flagsmith", "webhooks")

flagsmith-3.9.0/flagsmith/webhooks.py

@@ -0,0 +1,41 @@
+import hashlib
+import hmac
+from typing import Union
+
+
+def generate_signature(
+    request_body: Union[str, bytes],
+    shared_secret: str,
+) -> str:
+    """Generates a signature for a webhook request body using HMAC-SHA256.
+
+    :param request_body: The raw request body, as string or bytes.
+    :param shared_secret: The shared secret configured for this specific webhook.
+    :return: The hex-encoded signature.
+    """
+    if isinstance(request_body, str):
+        request_body = request_body.encode()
+
+    shared_secret_bytes = shared_secret.encode()
+
+    return hmac.new(
+        key=shared_secret_bytes,
+        msg=request_body,
+        digestmod=hashlib.sha256,
+    ).hexdigest()
+
+
+def verify_signature(
+    request_body: Union[str, bytes],
+    received_signature: str,
+    shared_secret: str,
+) -> bool:
+    """Verifies a webhook's signature to determine if the request was sent by Flagsmith.
+
+    :param request_body: The raw request body, as string or bytes.
+    :param received_signature: The signature as received in the X-Flagsmith-Signature request header.
+    :param shared_secret: The shared secret configured for this specific webhook.
+    :return: True if the signature is valid, False otherwise.
+    """
+    expected_signature = generate_signature(request_body, shared_secret)
+    return hmac.compare_digest(expected_signature, received_signature)

{flagsmith-3.8.0 → flagsmith-3.9.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "flagsmith"
-version = "3.8.0"
+version = "3.9.0"
 description = "Flagsmith Python SDK"
 authors = ["Flagsmith <support@flagsmith.com>"]
 license = "BSD3"

flagsmith-3.8.0/flagsmith/__init__.py

@@ -1,3 +0,0 @@
-from .flagsmith import Flagsmith
-
-__all__ = ("Flagsmith",)