Changeset 10909

Timestamp:

04/16/2021 04:18:55 AM (3 years ago)

Author:

dd32

Message:

API: HelpScout: Include some tooling for our DPO queue.

Location:

sites/trunk/api.wordpress.org/public_html/dotorg/helpscout

Files:

• common.php (added)
• dpo.php (added)
• profile.php (modified) (2 diffs)

sites/trunk/api.wordpress.org/public_html/dotorg/helpscout/profile.php

@@ -2 +2 @@
 // Simple profile lookup for HelpScout sidebar. Returns w.org links to HS for emails received.
 
-$base_dir = dirname( dirname( __DIR__ ) );
-require( $base_dir . '/wp-init.php' );
-
-// function to verify signature from HelpScout
-function isFromHelpScout($data, $signature) {
-    $calculated = base64_encode( hash_hmac( 'sha1', $data, HELPSCOUT_SECRET_KEY, true ) );
-    return hash_equals( $signature, $calculated );
-}
-
-//  HelpScout sends json data in the POST, so grab it from the input directly
-$data = file_get_contents( 'php://input' );
-
-// check the signature header
-if ( ! isset( $_SERVER['HTTP_X_HELPSCOUT_SIGNATURE'] ) ) {
-    exit;
-}
-
-$signature = $_SERVER['HTTP_X_HELPSCOUT_SIGNATURE'];
-if ( ! isFromHelpScout( $data, $signature ) ) {
-    // failure = no response
-    exit;
-}
-
-// get the info from HS
-$request = json_decode( $data );
+// $request is the validated HelpScout request.
+$request = include __DIR__ . '/common.php';
 
 // default empty output
@@ -46 +23 @@
 
 // response to HS is just HTML to display in the sidebar
-$response = array ('html' => $html);
+$response = array( 'html' => $html );
 
 echo json_encode( $response );
-