fix: validate hmac unconditionally (#28372)

2021-11-12 14:45:51 +05:30
parent 6d3e9bce5f
commit c0f06bc8e3
1 changed files with 0 additions and 1 deletions
--- a/erpnext/erpnext_integrations/utils.py
+++ b/erpnext/erpnext_integrations/utils.py
@@ -23,7 +23,6 @@ def validate_webhooks_request(doctype,  hmac_key, secret_key='secret'):
 			)

 			if frappe.request.data and \
-				frappe.get_request_header(hmac_key) and \
 				not sig == bytes(frappe.get_request_header(hmac_key).encode()):
 					frappe.throw(_("Unverified Webhook Data"))
 			frappe.set_user(settings.modified_by)