This commit is contained in:
memosr.eth 2026-04-24 19:26:34 -05:00 committed by GitHub
commit 6b1263c565
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -9,6 +9,7 @@ downloading from PR #4588 (YuhangLin).
"""
import asyncio
import hmac
import json
import logging
import os
@ -773,7 +774,7 @@ class BlueBubblesAdapter(BasePlatformAdapter):
or request.headers.get("x-guid")
or request.headers.get("x-bluebubbles-guid")
)
if token != self.password:
if not hmac.compare_digest(token or "", self.password or ""):
return web.json_response({"error": "unauthorized"}, status=401)
try:
raw = await request.read()