init

webhook/__init__.py

@@ -0,0 +1 @@
+# Webhook 模块

webhook/handler.py

@@ -0,0 +1,126 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""
+Gitea Webhook 处理器
+验证签名并解析 Webhook 事件
+"""
+import hmac
+import hashlib
+import logging
+from typing import Dict, Any, Optional
+
+logger = logging.getLogger(__name__)
+
+
+class GiteaWebhookHandler:
+    """Gitea Webhook 处理器"""
+
+    def __init__(self, config: Dict[str, Any]):
+        """
+        初始化 Webhook 处理器
+
+        Args:
+            config: Gitea 配置
+        """
+        self.config = config
+        self.base_url = config.get('base_url', 'http://localhost:3000')
+        self.webhook_secret = config.get('webhook_secret', '')
+
+    def verify_signature(self, payload: bytes, signature: str, secret: str) -> bool:
+        """
+        验证 Webhook 签名
+
+        Args:
+            payload: 请求体
+            signature: 请求头中的签名
+            secret: 密钥
+
+        Returns:
+            签名是否有效
+        """
+        if not secret:
+            logger.warning('未配置 Webhook 密钥，跳过验证')
+            return True
+
+        try:
+            # Gitea 使用 SHA256 HMAC
+            expected_signature = hmac.new(
+                secret.encode('utf-8'),
+                payload,
+                hashlib.sha256
+            ).hexdigest()
+
+            # 比较签名（使用 constant time 比较防止时序攻击）
+            return hmac.compare_digest(f'sha256={expected_signature}', signature)
+        except Exception as e:
+            logger.error(f'签名验证失败: {str(e)}')
+            return False
+
+    def parse_push_event(self, payload: Dict[str, Any]) -> Dict[str, Any]:
+        """
+        解析 Push 事件
+
+        Args:
+            payload: Webhook payload
+
+        Returns:
+            解析后的提交信息
+        """
+        repo = payload.get('repository', {})
+        commits = payload.get('commits', [])
+        ref = payload.get('ref', '')
+
+        return {
+            'repo_name': repo.get('full_name', ''),
+            'repo_url': repo.get('clone_url', ''),
+            'web_url': repo.get('web_url', ''),
+            'branch': ref.replace('refs/heads/', ''),
+            'commits': [
+                {
+                    'id': commit.get('id', '')[:8],
+                    'message': commit.get('message', ''),
+                    'author': commit.get('author', {}).get('name', ''),
+                    'email': commit.get('author', {}).get('email', ''),
+                    'timestamp': commit.get('timestamp', ''),
+                    'added': commit.get('added', []),
+                    'modified': commit.get('modified', []),
+                    'removed': commit.get('removed', []),
+                }
+                for commit in commits
+            ],
+            'pusher': payload.get('pusher', {}).get('name', ''),
+            'before': payload.get('before', ''),
+            'after': payload.get('after', ''),
+        }
+
+    def get_changed_files(self, commit: Dict[str, Any]) -> list:
+        """
+        获取提交中变更的文件列表
+
+        Args:
+            commit: 提交信息
+
+        Returns:
+            变更的文件列表
+        """
+        files = []
+        files.extend(commit.get('added', []))
+        files.extend(commit.get('modified', []))
+        files.extend(commit.get('removed', []))
+        return files
+
+    def filter_by_extension(self, files: list, extensions: list) -> list:
+        """
+        按文件扩展名过滤文件
+
+        Args:
+            files: 文件列表
+            extensions: 扩展名列表（如 ['.py', '.js']）
+
+        Returns:
+            过滤后的文件列表
+        """
+        return [
+            f for f in files
+            if any(f.endswith(ext) for ext in extensions)
+        ]