api: compare signature as bytes (#36515)

2019-11-13 09:10:27 +01:00 · 2019-11-13 09:10:27 +01:00 · ec72e371d3
parent c3fe5545ac
commit ec72e371d3
1 changed files with 1 additions and 0 deletions
--- a/wcs/api_utils.py
+++ b/wcs/api_utils.py
@ -44,6 +44,7 @@ def is_url_signed(utcnow=None, duration=DEFAULT_DURATION):
    signature = get_request().form.get('signature')
    if not isinstance(signature, six.string_types):
        return False
+    signature = force_bytes(signature)
    # verify signature
    orig = get_request().form.get('orig')
    if not isinstance(orig, six.string_types):