用于验证传入的 Twilio 请求的装饰器

Question

我试图遵循这个非常直接的指南，了解如何防止非 twilio 请求访问我为传入的 twilio 消息设置的 webhook url。它基本上涉及复制他们作为装饰器开发的功能，并将其应用于处理传入消息的视图。https://www.twilio.com/docs/usage/tutorials/how-to-secure-your-django-project-by-validating-incoming-twilio-requestsfrom django.http import HttpResponse, HttpResponseForbiddenfrom functools import wrapsfrom twilio import twimlfrom twilio.request_validator import RequestValidatorimport osdef validate_twilio_request(f):    """Validates that incoming requests genuinely originated from Twilio"""    @wraps(f)    def decorated_function(request, *args, **kwargs):        # Create an instance of the RequestValidator class        validator = RequestValidator(os.environ.get('TWILIO_AUTH_TOKEN'))        # Validate the request using its URL, POST data,        # and X-TWILIO-SIGNATURE header        request_valid = validator.validate(            request.build_absolute_uri(),            request.POST,            request.META.get('HTTP_X_TWILIO_SIGNATURE', ''))        # Continue processing the request if it's valid, return a 403 error if        # it's not        if request_valid:            return f(request, *args, **kwargs)        else:            return HttpResponseForbidden()    return decorated_function

Answer 1

似乎RequestValidator不接受无。这应该修复它：

validator = RequestValidator(os.environ.get('TWILIO_AUTH_TOKEN', ''))