Validate github webhook signature

validate_github_webhook.py

import hashlib
import hmac


class Signature(object):
    """Signature Validates Github Webhook Payload"""

    def sign_request(self, webhook_secret, data):
        """Generate Payload Signature"""

        message = bytes(data, 'utf-8')
        secret = bytes(webhook_secret, 'utf-8')

        hash = hmac.new(secret, message, hashlib.sha1)

        return hash.hexdigest()

    def validate_request(self, webhook_secret, data, signature):
        """Validate Payload Signature"""

        sha_name, signature = signature.split('=')

        if sha_name != 'sha1':
            return False

        return hmac.compare_digest(self.sign_request(webhook_secret, data), signature)