[tryton-commits] [tryton] [8.0] Use webhook secret to verify Shopify webhook

[Cédric Krier]

details:   https://code.tryton.org/tryton/commit/ca96272795e6
branch:    8.0
user:      Cédric Krier <c...@b2ck.com>
date:      Tue Aug 04 17:32:47 2026 +0200
description:
        Use webhook secret to verify Shopify webhook

        Closes #14989
        (grafted from 44d5d7ae9388dfb58c105fc52d582a5aa2f99cd2)
diffstat:

 modules/web_shop_shopify/routes.py |  5 ++++-
 1 files changed, 4 insertions(+), 1 deletions(-)

diffs (15 lines):

diff -r 30ec7a97e2c6 -r ca96272795e6 modules/web_shop_shopify/routes.py
--- a/modules/web_shop_shopify/routes.py        Wed Aug 05 10:07:54 2026 +0200
+++ b/modules/web_shop_shopify/routes.py        Tue Aug 04 17:32:47 2026 +0200
@@ -29,7 +29,10 @@
     Shop = pool.get('web.shop')
     shop = Shop.get(shop)
 
-    result = verify_webhook_req(request_to_shopify_req(request))
+    result = verify_webhook_req(
+        request_to_shopify_req(request), {
+            'client_secret': shop.shopify_webhook_shared_secret,
+            })
     if not result.ok:
         logger.debug("unauthorized %s", result)
         abort(result.response.status, result.response.body)