Articles for a Python site without manual work

import hashlib, hmac, json, time
from django.http import JsonResponse
from django.views.decorators.csrf import csrf_exempt
from django.views.decorators.http import require_POST

SECRET = os.environ["SEOWRITER_SECRET"]

@csrf_exempt          # запрос приходит извне, csrf-токена у него нет
@require_POST
def seowriter_webhook(request):
    raw = request.body
    timestamp = request.headers.get("X-SEOWriter-Timestamp", "")
    header = request.headers.get("X-SEOWriter-Signature", "")
    event = request.headers.get("X-SEOWriter-Event", "")

    if abs(time.time() - int(timestamp or 0)) > 300:
        return JsonResponse({"ok": False, "error": "stale"}, status=401)

    expected = hmac.new(SECRET.encode(), timestamp.encode() + b"." + raw, hashlib.sha256).hexdigest()
    valid = any(
        hmac.compare_digest(expected, part.strip()[3:])
        for part in header.split(",") if part.strip().startswith("v1=")
    )
    if not valid:
        return JsonResponse({"ok": False}, status=401)

    if event == "ping":
        return JsonResponse({"success": True, "cms": "Django"})

    article = json.loads(raw)["article"]

    # Ключ — seowriter_id: повторная доставка обновит запись, а не создаст вторую
    post, _ = Post.objects.update_or_create(
        seowriter_id=article["id"],
        defaults={
            "title": article["h1"],
            "slug": article["slug"],
            "body": article["content_html"],
            "excerpt": article["excerpt"],
            "meta_title": article["meta"]["title"],
            "meta_description": article["meta"]["description"],
            "cover_url": (article.get("cover") or {}).get("url"),
            "is_published": article["status"] == "publish",
        },
    )

    # Верните url — от него зависят внутренняя перелинковка и анонсы в соцсетях
    return JsonResponse({"ok": True, "id": post.id, "url": f"https://site.ru/blog/{post.slug}"})

@router.post("/api/seowriter")
async def seowriter_endpoint(request: Request):
    raw = await request.body()
    timestamp = request.headers.get("x-seowriter-timestamp", "")
    header = request.headers.get("x-seowriter-signature", "")
    # дальше проверка подписи и сохранение — тот же код, что выше