From 9043389f252d6b25d342566cc3c0835153f0e883 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=92=95=E8=B0=B7=E9=85=B1?= <74496778+GooGuJiang@users.noreply.github.com> Date: Sun, 24 Aug 2025 02:16:49 +0800 Subject: [PATCH] Pass timestamp as string to signature verification Changed the call to verify_request_signature to pass the timestamp as a string instead of an integer. This ensures proper signature verification and prevents unauthorized requests. --- app/router/lio.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/router/lio.py b/app/router/lio.py index d99fe71..d8ebcfd 100644 --- a/app/router/lio.py +++ b/app/router/lio.py @@ -461,7 +461,7 @@ async def remove_user_from_room( # Verify request signature body = await request.body() now = utcnow() - if not verify_request_signature(request, timestamp, body): + if not verify_request_signature(request, str(timestamp), body): raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid request signature"