From 18a4c920038dad645d7ba8239d843ad3e154e05c Mon Sep 17 00:00:00 2001 From: John Date: Tue, 23 May 2023 14:47:00 -0400 Subject: [PATCH 1/2] Update signature header Updates the Django-specific signature header to use SHA-256 rather than SHA-1 Fixes #202 --- django-ask-sdk/django_ask_sdk/skill_adapter.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/django-ask-sdk/django_ask_sdk/skill_adapter.py b/django-ask-sdk/django_ask_sdk/skill_adapter.py index c6cbf34..7a50820 100644 --- a/django-ask-sdk/django_ask_sdk/skill_adapter.py +++ b/django-ask-sdk/django_ask_sdk/skill_adapter.py @@ -47,7 +47,7 @@ #: the `header key `__ #: provided by Alexa, because of Django's HTTP #: `Meta headers `__. -SIGNATURE_KEY = "HTTP_SIGNATURE" +SIGNATURE_KEY = "HTTP_SIGNATURE_256" logger = logging.getLogger("django.ask-sdk") From 317f6a3ff63127ac5ae289b13e13e8f28513d3bc Mon Sep 17 00:00:00 2001 From: John Date: Tue, 23 May 2023 16:36:05 -0400 Subject: [PATCH 2/2] Update ask-sdk-webservice-support version Ensures that Django support matches the requirement for SHA-256 introduced in 1.3.3 --- django-ask-sdk/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/django-ask-sdk/requirements.txt b/django-ask-sdk/requirements.txt index cac6465..60fab4b 100644 --- a/django-ask-sdk/requirements.txt +++ b/django-ask-sdk/requirements.txt @@ -1,2 +1,2 @@ -ask-sdk-webservice-support>=0.1.0 +ask-sdk-webservice-support>=1.3.3 django>=2.0