diff --git a/lms/djangoapps/verify_student/models.py b/lms/djangoapps/verify_student/models.py index 57557d6d4657a6a638605f0732c47b1f913c526b..beb8b6848e22ec907dcfc8b5765b259e07787e12 100644 --- a/lms/djangoapps/verify_student/models.py +++ b/lms/djangoapps/verify_student/models.py @@ -887,10 +887,8 @@ class SoftwareSecurePhotoVerification(PhotoVerification): "Content-Type": "application/json", "Date": formatdate(timeval=None, localtime=False, usegmt=True) } - - body_for_signature = {"EdX-ID": str(self.receipt_id)} _message, _sig, authorization = generate_signed_message( - "POST", headers, body_for_signature, access_key, secret_key + "POST", headers, body, access_key, secret_key ) headers['Authorization'] = authorization diff --git a/lms/djangoapps/verify_student/views.py b/lms/djangoapps/verify_student/views.py index 38dafa9268530f9ee52c1e56416f7c64b942f98c..2c900bd25e7c9fc37ba4fe38a03c55fa16939f71 100644 --- a/lms/djangoapps/verify_student/views.py +++ b/lms/djangoapps/verify_student/views.py @@ -1104,15 +1104,13 @@ def results_callback(request): headers = { "Authorization": request.META.get("HTTP_AUTHORIZATION", ""), - "Content-Type": "application/json", "Date": request.META.get("HTTP_DATE", "") } - body_for_signature = {"EdX-ID": body_dict.get("EdX-ID")} has_valid_signature( "POST", headers, - body_for_signature, + body_dict, settings.VERIFY_STUDENT["SOFTWARE_SECURE"]["API_ACCESS_KEY"], settings.VERIFY_STUDENT["SOFTWARE_SECURE"]["API_SECRET_KEY"] )