From f82c9ceb32fcfb1f9b68b0725cec0df4d8ec8224 Mon Sep 17 00:00:00 2001
From: cuizhibin <cuizhibin@kyland.com>
Date: Tue, 22 Jul 2025 10:23:36 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B5=8B=E8=AF=95gitea=E9=83=A8=E7=BD=B2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/com/dite/znpt/web/build/DeployController.java     | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/web/src/main/java/com/dite/znpt/web/build/DeployController.java b/web/src/main/java/com/dite/znpt/web/build/DeployController.java
index 1d7b3a1..d5b662a 100644
--- a/web/src/main/java/com/dite/znpt/web/build/DeployController.java
+++ b/web/src/main/java/com/dite/znpt/web/build/DeployController.java
@@ -61,7 +61,7 @@ public class DeployController {
 
         // 1. 签名校验
         if (!validSignature(body, signature)) {
-            throw new RuntimeException("签名错误");
+            return ResponseEntity.status(403).body("签名验证失败");
         }
 
         // 2. 启动部署流程
@@ -75,9 +75,8 @@ public class DeployController {
         try {
             Mac mac = Mac.getInstance("HmacSHA256");
             mac.init(new SecretKeySpec(webhookSecret.getBytes(StandardCharsets.UTF_8), "HmacSHA256"));
-            byte[] hash = mac.doFinal(body);
-            String computed = "sha256=" + bytesToHex(hash);
-            return computed.equalsIgnoreCase(sigHeader);
+            String computed = bytesToHex(mac.doFinal(body));
+            return computed.equalsIgnoreCase(sigHeader);   // 不区分大小写
         } catch (Exception e) {
             return false;
         }