ｄｆ

mysite/asgi.py

@@ -627,7 +627,7 @@ logger = logging.getLogger(__name__)
 CHANNEL_ID = os.getenv('CHANNEL_ID')
 CHANNEL_SECRET = os.getenv('CHANNEL_SECRET')
 CHANNEL_ACCESS_TOKEN = os.getenv('CHANNEL_ACCESS_TOKEN')
-WEBHOOK_URL = "https://api.coze.com/adapter/line/webhook/7372538698808246290"
+WEBHOOK_URL = os.getenv('WEBHOOK_URL')
 import requests
 @app.post("/webhook")
 async def webhook(request: Request):
@@ -640,10 +640,22 @@ async def webhook(request: Request):
         logger.info('Received Headers: %s', received_headers)
         logger.info('Received Body: %s', body.decode('utf-8'))
 
-        # 送信先のURLとヘッダー
+        # 必要なヘッダー情報を抽出
+        line_signature = received_headers.get('x-line-signature')
+        if not line_signature:
+            raise HTTPException(status_code=400, detail="X-Line-Signature header is missing.")
+
+        # 署名を検証
+        if not validate_signature(body.decode('utf-8'), line_signature, os.getenv('CHANNEL_SECRET')):
+            raise HTTPException(status_code=400, detail="Invalid signature.")
+
+        # 送信するヘッダーを設定
         headers = {key: value for key, value in received_headers.items()}
         headers['Authorization'] = f'Bearer {CHANNEL_ACCESS_TOKEN}'  # 認証トークンを追加
 
+        # ログに転送先URLを記録
+        logger.info('Forwarding to URL: %s', WEBHOOK_URL)
+
         # データを転送
         response = requests.post(WEBHOOK_URL, headers=headers, data=body)
 

workspace/sample.duckdb

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:7dd4e50b45bf63d6559530169865f5ebbc89b73b78dd6f1f490828b79fa504d4
-size 12288
+oid sha256:5feab3c6ad6f1a743f0216146bf119734da52492ab89a3bea577c5165a4584e9
+size 798720