[add]: enforce content type json

app.log

@@ -132,3 +132,7 @@ TypeError: require_api_key() missing 1 required positional argument: 'f'
 2025-03-21 09:41:16,993 - INFO - Processing Disbursement request
 2025-03-21 09:41:16,995 - ERROR - Validation Error: {'requestId': ['Missing data for required field.'], 'productId': ['Missing data for required field.'], 'collectAmountMgtFee': ['Missing data for required field.'], 'collectAmountVAT': ['Missing data for required field.'], 'provideAmount': ['Missing data for required field.'], 'countryId': ['Missing data for required field.'], 'debtId': ['Missing data for required field.'], 'collectAmountInsurance': ['Missing data for required field.'], 'channel': ['Unknown field.'], 'lienAmount': ['Unknown field.'], '$type': ['Unknown field.'], 'msisdn': ['Unknown field.'], 'countryCode': ['Unknown field.']}
 2025-03-21 09:48:19,845 - ERROR - Unauthorized access: Missing API key.
+2025-03-21 10:32:19,196 - ERROR - Unauthorized access: Missing API key.
+2025-03-21 10:46:47,209 - ERROR - Unauthorized access: Missing API key.
+2025-03-21 11:05:50,287 - INFO - Processing Disbursement request
+2025-03-21 11:05:50,290 - ERROR - Validation Error: {'debtId': ['Missing data for required field.'], 'requestId': ['Missing data for required field.'], 'productId': ['Missing data for required field.'], 'provideAmount': ['Missing data for required field.'], 'collectAmountInsurance': ['Missing data for required field.'], 'collectAmountVAT': ['Missing data for required field.'], 'countryId': ['Missing data for required field.'], 'collectAmountMgtFee': ['Missing data for required field.'], 'msisdn': ['Unknown field.'], 'channel': ['Unknown field.'], 'lienAmount': ['Unknown field.'], 'countryCode': ['Unknown field.'], '$type': ['Unknown field.']}

app/__init__.py

@@ -2,7 +2,7 @@ from flask import Flask
 from flask_cors import CORS
 from app.config import Config
 from app.routes import api
-from app.errors import bad_request, method_not_allowed, not_found
+from app.errors import method_not_allowed, unsupported_media_type
 
 def create_app():
     """ Factory function to create a Flask app instance """
@@ -19,8 +19,7 @@ def create_app():
 
    
     # Error Handlers
-    app.register_error_handler(400, bad_request)
-    app.register_error_handler(404, not_found)
     app.register_error_handler(405, method_not_allowed)
+    app.register_error_handler(415, unsupported_media_type)
 
     return app

app/errors/__init__.py

@@ -1 +1 @@
-from .handlers import bad_request, method_not_allowed, not_found
+from .handlers import method_not_allowed, unsupported_media_type

app/errors/handlers.py

@@ -9,3 +9,6 @@ def not_found(error):
 
 def bad_request(error):
     return ResponseHelper.bad_request(message="Bad Request")
+
+def unsupported_media_type(error):
+    return ResponseHelper.error(message="Unsupported Media Type", status_code=415)

app/middlewares/__init__.py

@@ -1,2 +1,4 @@
 from .verify_api_key import require_api_key
 from .app_id_checker import require_app_id
+from .request_validator import validate_json
+from .cors import enforce_json

app/middlewares/cors.py

@@ -1,9 +1,8 @@
-# app/middlewares/cors.py
 from flask import request
+from app.helpers.response_helper import ResponseHelper
 
-def cors_headers(response):
+
-    """Allow cross-origin requests"""
+def enforce_json():
-    response.headers["Access-Control-Allow-Origin"] = "*"
+    """Middleware to enforce JSON Content-Type for incoming requests"""
-    response.headers["Access-Control-Allow-Methods"] = "GET, POST, PUT, PATCH, DELETE"
+    if request.method in ["POST", "PUT", "PATCH"] and request.content_type != "application/json":
-    response.headers["Access-Control-Allow-Headers"] = "Authorization, Content-Type"
+        return ResponseHelper.error( message="Content-Type must be application/json")
-    return response

app/middlewares/request_validator.py

@@ -1,11 +1,16 @@
-# app/middlewares/request_validator.py
+from functools import wraps
 from flask import request
 from app.helpers.response_helper import ResponseHelper
+from app.utils.logger import logger
 
-def validate_json():
+def validate_json(f):
-    """Ensure request has valid JSON"""
+    """Decorator to ensure the request has a valid JSON body."""
-    if not request.is_json:
+    @wraps(f)
-        return ResponseHelper.error(
+    def decorated_function(*args, **kwargs):
-                message="Request must be JSON",
+        if not request.is_json:
-                status_code=415
+            logger.error("Invalid request: Request must be JSON.")
-            )
+            return ResponseHelper.error(message="Request must be JSON", status_code=415)
+
+        return f(*args, **kwargs)
+
+    return decorated_function

app/routes/routes.py

@@ -11,18 +11,17 @@ from app.blueprints import (
     NewTransactionCheckService,
 )
 from app.utils.logger import logger
-from app.middlewares import require_api_key
+from app.middlewares import require_api_key, require_app_id, enforce_json 
-from app.middlewares import require_app_id 
 
 
 api = Blueprint("api", __name__)
 
 
 
-# @api.before_request
+@api.before_request
-# def require_api_key_middleware():
+def cors_middleware():
-#     """Middleware applied globally to all API routes in this blueprint"""
+    """Middleware applied globally to all API routes in this blueprint"""
-#     return require_api_key()
+    return enforce_json()
 
 
 
@@ -41,6 +40,7 @@ def rac_check():
 @require_api_key
 @require_app_id
 def disbursement():
+
     data = request.get_json()
     # logger.info(f"Disbursement request received: {data}")
     response = DisbursementService.process_request(data)