From 6dc029ad548b25ae545c37342e6ca2f125de7c58 Mon Sep 17 00:00:00 2001 From: cfdaily Date: Mon, 8 Jun 2026 07:32:38 +0800 Subject: [PATCH] auto-sync: 2026-06-08 07:32:38 --- src/api/toolchain_routes.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/api/toolchain_routes.py b/src/api/toolchain_routes.py index 89d9c1a..fddb1e2 100644 --- a/src/api/toolchain_routes.py +++ b/src/api/toolchain_routes.py @@ -426,7 +426,10 @@ async def gitea_webhook( # 1. 签名验证 if not _verify_signature(body, x_gitea_signature): - logger.warning("Webhook signature verification failed") + logger.warning("Webhook signature verification failed (has_sig=%s, sig=%s, expected=%s)", + bool(x_gitea_signature), + x_gitea_signature[:16] if x_gitea_signature else "none", + hmac.new(_WEBHOOK_SECRET.encode(), body, hashlib.sha256).hexdigest()[:16]) return Response(status_code=403, content="signature verification failed") # 2. 幂等检查