Merge pull request #4 from workos-inc/feature/webhooks-validation-route

Add webhooks validation route and update dependency versions

Author: awolfden

python-django-directory-sync-example/README.md

@@ -31,7 +31,7 @@ If you get stuck, please reach out to us at [email protected] so we can help.
    $ git clone [email protected]:workos-inc/python-django-example-applications.git
    ```
 
-3. Navigate to the Admin Portal example app within the cloned repo.
+3. Navigate to the Directory Sync example app within the cloned repo.
    ```bash
    $ cd python-django-example-applications/python-django-directory-sync-example
    ````
@@ -67,6 +67,7 @@ If you get stuck, please reach out to us at [email protected] so we can help.
    ```bash
    export WORKOS_API_KEY=<value found in step 6>
    export DIRECTORY_ID=<value found in step 6>
+   export WEBHOOKS_SECRET=<value found in WorkOS Dashboard>
    ```
 
    To exit the Nano text editor, type `CTRL + x`. When prompted to "Save modified buffer", type `Y`, then press the `Enter` or `Return` key.

python-django-directory-sync-example/directory_sync/urls.py

@@ -5,4 +5,5 @@
     path('', views.get_home, name='home'),
     path('users', views.get_directory_users, name='users'),
     path('groups', views.get_directory_groups, name='groups'),
+    path('webhooks', views.webhooks, name='webhooks'),
 ]

python-django-directory-sync-example/directory_sync/views.py

@@ -1,8 +1,10 @@
 import os
+import json
+from django.http.response import HttpResponse
 import workos
 from django.conf import settings
 from django.shortcuts import render
-
+from django.views.decorators.csrf import csrf_exempt
 
 workos.api_key = os.getenv('WORKOS_API_KEY')
 workos.base_api_url = 'http://localhost:8000/' if settings.DEBUG else workos.base_api_url
@@ -20,3 +22,19 @@ def get_directory_users(request):
 def get_directory_groups(request):
     groups = workos.client.directory_sync.list_groups(directory=directory_id)
     return render(request, 'directory_sync/groups.html', {"groups": groups})
+
+@csrf_exempt
+def webhooks(request):
+    dict_payload = json.loads(request.body)
+    payload = json.dumps(dict_payload)
+    sig_header = request.headers.get('WorkOS-Signature')
+
+    response = workos.client.webhooks.verify_event(
+        payload = payload,
+        sig_header = sig_header,
+        secret = os.getenv('WEBHOOKS_SECRET')
+    )
+
+    print(response)
+
+    return HttpResponse(200)

python-django-directory-sync-example/requirements.txt

@@ -1,10 +1,11 @@
 asgiref==3.3.1
 certifi==2020.12.5
 chardet==4.0.0
-Django==3.1.7
+Django==3.1.13
 idna==2.10
 pytz==2021.1
 requests==2.25.1
-sqlparse==0.4.1
-urllib3==1.26.4
-workos==0.8.6
+sqlparse==0.4.2
+urllib3==1.26.5
+workos==1.5.1
+python-dotenv

python-django-directory-sync-example/workos_django/settings.py

@@ -23,9 +23,9 @@
 SECRET_KEY = 'of3^3#x@z=(qe!s_stg-a5k1ojxl+ix(^09ewv+$9vt1-u$1d#'
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = False
+DEBUG = True
 
-ALLOWED_HOSTS = ['localhost', '127.0.0.1']
+ALLOWED_HOSTS = ['*']
 
 
 # Application definition