app/models/agents/webhook_agent.rb

@@ -50,40 +50,12 @@ module Agents

                     def receive_web_request(params, method, format)
              

                       # check the secret
              

                       secret = params.delete('secret')
              

                -      puts secret
              

                -      puts params
              

                -      #return ["Not Authorized", 401] unless secret == options['secret']
              

                +      return ["Not Authorized", 401] unless secret == options['secret']
              

                 
              

                       # check the verbs
              

                       verbs = (interpolated['verbs'] || 'post').split(/,/).map { |x| x.strip.downcase }.select { |x| x.present? }
              

                       return ["Please use #{verbs.join('/').upcase} requests only", 401] unless verbs.include?(method)
              

                 
              

                -      # check the reCAPTCHA response if required
              

                -      if recaptcha_secret = interpolated['recaptcha_secret'].presence
              

                -        recaptcha_response = params.delete('g-recaptcha-response') or
              

                -          return ["Not Authorized", 401]
              

                -
              

                -        parameters = {
              

                -          secret: recaptcha_secret,
              

                -          response: recaptcha_response,
              

                -        }
              

                -
              

                -        if boolify(interpolated['recaptcha_send_remote_addr'])
              

                -          parameters[:remoteip] = request.env['REMOTE_ADDR']
              

                -        end
              

                -
              

                -        begin
              

                -          response = faraday.post('https://www.google.com/recaptcha/api/siteverify',
              

                -                                  parameters)
              

                -        rescue => e
              

                -          error "Verification failed: #{e.message}"
              

                -          return ["Not Authorized", 401]
              

                -        end
              

                -
              

                -        JSON.parse(response.body)['success'] or
              

                -          return ["Not Authorized", 401]
              

                -      end
              

                -
              

                       [payload_for(params)].flatten.each do |payload|
              

                         create_event(payload: payload)
              

                       end