Support the signed header.

Now we can enable the signed header by passing the `client_ips` keyword argument
to the Instagram.Client constructor.

    c = client.InstagramAPI(
            access_token=access_token,
            client_ips="1.2.3.4",
            client_secret="CS"
        )
    c.follow_user(123) # => call API with X-Insta-Forwarded-For signature.

If you do not set the client_ips nor client_secret, X-Insta-Forwarded-For is not sent.

Author: yssk22

instagram/bind.py

@@ -2,6 +2,8 @@
 from oauth2 import OAuth2Request
 import re
 from json_import import simplejson
+import hmac
+from hashlib import sha256
 
 re_path_template = re.compile('{\w+}')
 
@@ -41,6 +43,7 @@ class InstagramAPIMethod(object):
         path = config['path']
         method = config.get('method', 'GET')
         accepts_parameters = config.get("accepts_parameters", [])
+        signature = config.get("signature", False)
         requires_target_user = config.get('requires_target_user', False)
         paginates = config.get('paginates', False)
         root_class = config.get('root_class', None)
@@ -107,6 +110,12 @@ def _build_pagination_info(self, content_obj):
 
         def _do_api_request(self, url, method="GET", body=None, headers=None):
             headers = headers or {}
+            if self.signature and self.api.client_ips != None and self.api.client_secret != None:
+                secret = self.api.client_secret
+                ips = self.api.client_ips
+                signature = hmac.new(secret, ips, sha256).hexdigest()
+                headers['X-Insta-Forwarded-For'] = '|'.join([ips, signature])
+
             response, content = OAuth2Request(self.api).make_request(url, method=method, body=body, headers=headers)
             if response['status'] == '503':
                 raise InstagramAPIError(response['status'], "Rate limited", "Your client is making too many request per second")

instagram/client.py

@@ -46,25 +46,29 @@ def __init__(self, *args, **kwargs):
     like_media = bind_method(
                 path="/media/{media_id}/likes",
                 method="POST",
+                signature=True,
                 accepts_parameters=['media_id'],
                 response_type="empty")
 
     unlike_media = bind_method(
                 path="/media/{media_id}/likes",
                 method="DELETE",
+                signature=True,
                 accepts_parameters=['media_id'],
                 response_type="empty")
 
     create_media_comment = bind_method(
                 path="/media/{media_id}/comments",
                 method="POST",
+                signature=True,
                 accepts_parameters=['media_id', 'text'],
                 response_type="empty",
                 root_class=Comment)
 
     delete_comment = bind_method(
                 path="/media/{media_id}/comments/{comment_id}",
                 method="DELETE",
+                signature=True,
                 accepts_parameters=['media_id', 'comment_id'],
                 response_type="empty")
 
@@ -170,6 +174,7 @@ def __init__(self, *args, **kwargs):
     change_user_relationship = bind_method(
                 method="POST",
                 path="/users/{user_id}/relationship",
+                signature=True,
                 root_class=Relationship,
                 accepts_parameters=["user_id", "action"],
                 paginates=True,

instagram/oauth2.py

@@ -24,9 +24,10 @@ class OAuth2API(object):
     # override with 'Instagram', etc
     api_name = "Generic API"
 
-    def __init__(self, client_id=None, client_secret=None, access_token=None, redirect_uri=None):
+    def __init__(self, client_id=None, client_secret=None, client_ips=None, access_token=None, redirect_uri=None):
         self.client_id = client_id
         self.client_secret = client_secret
+        self.client_ips = client_ips
         self.access_token = access_token
         self.redirect_uri = redirect_uri