Merge pull request #57 from bookernath/remove-streql-dependency

Remove dependency on streql

README.rst

@@ -6,7 +6,7 @@ Bigcommerce API Python Client
 Wrapper over the ``requests`` library for communicating with the Bigcommerce v2 API.
 
 Install with ``pip install bigcommerce`` or ``easy_install bigcommerce``. Tested with
-python 2.7 and 3.4, and only requires ``requests`` and ``streql``.
+python 2.7.7+ and 3.4, and only requires ``requests`` and ``pyjwt``.
 
 Usage
 -----

bigcommerce/connection.py

@@ -14,7 +14,6 @@
 
 import json  # only used for urlencode querystr
 import logging
-import streql
 import requests
 
 from bigcommerce.exception import *
@@ -216,7 +215,7 @@ def verify_payload(signed_payload, client_secret):
         dc_json = base64.b64decode(encoded_json)
         signature = base64.b64decode(encoded_hmac)
         expected_sig = hmac.new(client_secret.encode(), base64.b64decode(encoded_json), hashlib.sha256).hexdigest()
-        authorised = streql.equals(signature, expected_sig)
+        authorised = hmac.compare_digest(signature, expected_sig.encode())
         return json.loads(dc_json.decode()) if authorised else False
 
     def fetch_token(self, client_secret, code, context, scope, redirect_uri,

requirements.txt

@@ -5,5 +5,4 @@ mock==1.0.1
 nose==1.3.0
 nose-cov==1.6
 requests==2.1.0
-streql==3.0.2
 pyjwt==1.4.0

setup.py

@@ -12,7 +12,7 @@ def read(fname):
     version = VERSION,
 
     packages = find_packages(),
-    install_requires = ['requests>=2.1.0', 'streql>=3.0.2', 'pyjwt>=1.4.0'],
+    install_requires = ['requests>=2.1.0', 'pyjwt>=1.4.0'],
 
 
     url = 'https://github.com/bigcommerce/bigcommerce-api-python',