Validate Github webhook signature/secret in python3

verify_github_webhook_signature.py

def validate_signature(payload, secret):

    # Get the signature from the payload
    signature_header = payload['headers']['X-Hub-Signature']
    sha_name, github_signature = signature_header.split('=')
    if sha_name != 'sha1':
        print('ERROR: X-Hub-Signature in payload headers was not sha1=****')
        return False
      
    # Create our own signature
    body = payload['body']
    local_signature = hmac.new(secret.encode('utf-8'), msg=body.encode('utf-8'), digestmod=hashlib.sha1)

    # See if they match
    return hmac.compare_digest(local_signature.hexdigest(), github_signature)

In Flask the following replacements are needed:

• payload['headers'] -> payload.headers
• payload['body'] -> payload.data
• body.encode('utf-8') -> body