Move hmac from sha1 to sha256

Signed-off-by: Richard Gee <richard@technologee.co.uk>

Author: rgee0

go.mod

@@ -3,7 +3,7 @@ module github.com/alexellis/derek
 go 1.15
 
 require (
-	github.com/alexellis/hmac v0.0.0-20180624211220-5c52ab81c0de
+	github.com/alexellis/hmac v1.3.0
 	github.com/dgrijalva/jwt-go v3.2.0+incompatible
 	github.com/google/go-github v17.0.0+incompatible
 	github.com/google/go-querystring v1.0.0 // indirect

go.sum

@@ -33,8 +33,8 @@ cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
-github.com/alexellis/hmac v0.0.0-20180624211220-5c52ab81c0de h1:jiPEvtW8VT0KwJxRyjW2VAAvlssjj9SfecsQ3Vgv5tk=
-github.com/alexellis/hmac v0.0.0-20180624211220-5c52ab81c0de/go.mod h1:uAbpy8G7sjNB4qYdY6ymf5OIQ+TLDPApBYiR0Vc3lhk=
+github.com/alexellis/hmac v1.3.0 h1:DJl5wfuhwj2IjG9XRXzPY6bHZYrwrARFTotpxX3KS08=
+github.com/alexellis/hmac v1.3.0/go.mod h1:WmZwlIfB7EQaDuiScnQoMSs3K+1UalW/7ExXP3Cc2zU=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=

main.go

@@ -37,10 +37,10 @@ func main() {
 
 	requestRaw, _ := ioutil.ReadAll(os.Stdin)
 
-	xHubSignature := os.Getenv("Http_X_Hub_Signature")
+	xHubSignature256 := os.Getenv("Http_X_Hub_Signature_256")
 
-	if validateHmac && len(xHubSignature) == 0 {
-		os.Stderr.Write([]byte("must provide X_Hub_Signature"))
+	if validateHmac && len(xHubSignature256) == 0 {
+		os.Stderr.Write([]byte("must provide X_Hub_Signature_256"))
 		os.Exit(1)
 	}
 
@@ -51,7 +51,7 @@ func main() {
 	}
 
 	if validateHmac {
-		err := hmac.Validate(requestRaw, xHubSignature, config.SecretKey)
+		err := hmac.Validate(requestRaw, xHubSignature256, config.SecretKey)
 		if err != nil {
 			os.Stderr.Write([]byte(err.Error()))
 			os.Exit(1)

vendor/github.com/alexellis/hmac/go.mod

@@ -1,4 +1,4 @@
-# github.com/alexellis/hmac v0.0.0-20180624211220-5c52ab81c0de
+# github.com/alexellis/hmac v1.3.0
 ## explicit
 github.com/alexellis/hmac
 # github.com/dgrijalva/jwt-go v3.2.0+incompatible