用 Django 来响应 Github Webhook

# coding=utf-8
from django.db import models
from django.utils.translation import ugettext as _

class Github_Webhook(models.Model):
    ''' Model for webhook of github

    '''
    repo_name = models.CharField(
        verbose_name = _(u'repository name'),
        help_text = _(u' '),
        max_length = 255
    )
    repo_ssh_url = models.CharField(
        verbose_name = _(u'repository ssh_url'),
        help_text = _(u' '),
        max_length = 255
    )
    repo_id = models.IntegerField(
        verbose_name = _(u'repository id value'),
        help_text = _(u'Your repository id in github'),
        default = 0
    )
    secret = models.CharField(
        verbose_name = _(u'repository secret'),
        help_text = _(u' '),
        max_length = 255
    )

    def __unicode__(self):
        return u'%s' % (self.repo_name,)

@csrf_exempt
def github_webhook(request):
    if request.method == 'POST' and request.body:
        http_x_github_event = request.META.get('HTTP_X_GITHUB_EVENT', '')
        http_x_hub_signature = request.META.get('HTTP_X_HUB_SIGNATURE', '')
        json_data = json.loads(request.body)
        repo_data = json_data.get('repository', '')
        sender_data = json_data.get('sender', '')
        if repo_data and sender_data and http_x_hub_signature:
            user_id = sender_data.get('id', '')
            user_name = sender_data.get('login', '')
            repo_name = repo_data.get('name', '')
            repo_id = repo_data.get('id', '')
            repo_ssh_url = repo_data.get('ssh_url', '')
            sha_name, signature = http_x_hub_signature.split('=')
            if sha_name != 'sha1':
                return HttpResponseForbidden('HeHe!')
            webhook = Github_Webhook.objects.filter(
                repo_name=repo_name,
                repo_ssh_url=repo_ssh_url
            ).first()
            if webhook:
                # HMAC requires the key to be bytes, but data is string
                mac = hmac.new(str(webhook.secret), msg=request.body, digestmod=sha1)
                # Python prior to 2.7.7 does not have hmac.compare_digest
                if hexversion >= 0x020707F0:
                    if not hmac.compare_digest(str(mac.hexdigest()), str(signature)):
                        return HttpResponseForbidden('HeHe!')
                else:
                    # What compare_digest provides is protection against timing
                    # attacks; we can live without this protection for a web-based
                    # application
                    if not str(mac.hexdigest()) == str(signature):
                        return HttpResponseForbidden('HeHe!')
                if webhook.repo_id == -1 and http_x_github_event == 'ping':
                    # Save this webhook
                    webhook.repo_id = int(repo_id)
                    webhook.save()
                    content = u'Save github webhook: [%s] by user %s, %s' % (
                        webhook, user_id, user_name)
                    write_log(content)
                    return HttpResponse('Webhook saved!')
                if webhook.repo_id == int(repo_id) and http_x_github_event == 'push':
                    # Do your webhook job
                    # such as restarting a docker container.
                    content = u'Restart github webhook: [%s] by user %s, %s' % (
                        webhook, user_id, user_name)
                    write_log(content)
                    return HttpResponse('Restarted!')

    return HttpResponseForbidden('HeHe!')