授权回调域名校验

import hashlib
import hmac
import requests

# 假设授权服务器返回的签名和数据如下
signature = "abc123"
data = {
    "user_id": "12345",
    "token": "xyz789"
}

# 你的密钥
secret_key = "your_secret_key"

# 生成签名
def generate_signature(data, secret_key):
    data_str = "&".join([f"{k}={v}" for k, v in sorted(data.items())])
    signature = hmac.new(secret_key.encode(), data_str.encode(), hashlib.sha256).hexdigest()
    return signature

# 校验签名
def verify_signature(data, signature, secret_key):
    generated_signature = generate_signature(data, secret_key)
    return hmac.compare_digest(signature, generated_signature)

if verify_signature(data, signature, secret_key):
    print("签名验证通过")
else:
    print("签名验证失败")

# 检查IP白名单
def check_ip_whitelist(ip):
    whitelist = ["192.168.1.1", "192.168.1.2"]
    return ip in whitelist

# 假设回调请求的IP地址
request_ip = "192.168.1.1"

if check_ip_whitelist(request_ip):
    print("IP白名单校验通过")
else:
    print("IP白名单校验失败")