Package fitbit: Log signatures on failure.

[kraftakt.git] / fitbit / fitbit.go

diff --git a/fitbit/fitbit.go b/fitbit/fitbit.go
index 33f2ccd..9466b12 100644 (file)
--- a/fitbit/fitbit.go
+++ b/fitbit/fitbit.go
@@ -6,6 +6,7 @@ import (
        "crypto/hmac"
        "crypto/sha1"
        "encoding/base64"
        "crypto/hmac"
        "crypto/sha1"
        "encoding/base64"

+       "encoding/hex"

        "encoding/json"
        "fmt"
        "io/ioutil"
        "encoding/json"
        "fmt"
        "io/ioutil"


@@ -70,6 +71,12 @@ func CheckSignature(ctx context.Context, payload []byte, rawSig string) bool {
        mac.Write(payload)
        signatureWant := mac.Sum(nil)
 
        mac.Write(payload)
        signatureWant := mac.Sum(nil)
 

+       if !hmac.Equal(signatureGot, signatureWant) {
+               log.Debugf(ctx, "CheckSignature(): got %q, want %q",
+                       hex.EncodeToString(signatureGot),
+                       hex.EncodeToString(signatureWant))
+       }
+

        return hmac.Equal(signatureGot, signatureWant)
 }
 
        return hmac.Equal(signatureGot, signatureWant)
 }