diff --git a/apps/api/tests/test_gitea_webhook.py b/apps/api/tests/test_gitea_webhook.py index f158804c..4e2f2859 100644 --- a/apps/api/tests/test_gitea_webhook.py +++ b/apps/api/tests/test_gitea_webhook.py @@ -138,13 +138,16 @@ def ping_payload(): def generate_signature(secret: str, body: bytes) -> str: - """生成 Gitea Webhook 簽章 (X-Gitea-Signature)""" - signature = hmac.new( + """生成 Gitea Webhook 簽章 (X-Gitea-Signature) + + Gitea 送出純 hex(無 sha256= 前綴),與 GitHub 不同。 + 2026-04-05 ogt: 修正為純 hex 格式 + """ + return hmac.new( secret.encode(), body, hashlib.sha256, ).hexdigest() - return f"sha256={signature}" def prepare_request(secret: str, payload: dict) -> tuple[bytes, str]: