add webhookverify option

nr/configs/config.py

@@ -9,6 +9,7 @@ class Settings(BaseSettings):
     channel_open_api_access_secret: StrictStr = ""
     channel_group_id: StrictStr = ""
     newreleases_webhook_verify_key: StrictStr = ""
+    newreleases_webhook_verify: bool = True
 
 
 settings = Settings()

nr/routers/new_releases.py

@@ -2,6 +2,7 @@
 from typing import Annotated, List
 from zoneinfo import ZoneInfo
 from dateutil import parser
+from ..configs.config import settings
 from ..channel.client import ChannelOpenApiClient
 from ..channel.message import Block, Message
 from ..schemas.releasehook import ReleaseHook
@@ -19,7 +20,8 @@ def hook(
     x_newreleases_timestamp: Annotated[str, Header()],
     release: ReleaseHook
 ) -> Response:
-    if not verify_signature(x_newreleases_signature, x_newreleases_timestamp, release):
+    if settings.newreleases_webhook_verify and \
+       not verify_signature(x_newreleases_signature, x_newreleases_timestamp, release):
         raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED)
 
     release_time = parser.parse(release.time) \

nr/schemas/releasehook.py

@@ -8,7 +8,7 @@ class Note(BaseModel):
 
 
 class Account(BaseModel):
-    type:str
+    type: str
     id: str
     name: str
 

nr/utils/new_releases.py

@@ -8,7 +8,7 @@
 
 def verify_signature(signature: str, timestamp: str, release: ReleaseHook) -> bool:
     secret: str = settings.newreleases_webhook_verify_key
-    message: str = f"{timestamp}.{''.join(release.json(exclude_unset=True, exclude_none=True).split())}"
+    message: str = f"{timestamp}.{''.join(release.json(exclude_unset=True).split())}"
     _hmac: HMAC = hmac.new(
         key=secret.encode(),
         msg=message.encode(),