[chore]: Separated Simbrella to bank calls

app/middlewares/__init__.py

@@ -0,0 +1 @@
+from .verify_api_key import require_api_key

app/middlewares/app_id_checker.py

@@ -0,0 +1,20 @@
+from flask import request
+from app.helpers.response_helper import ResponseHelper
+from app.utils.logger import logger
+import os
+
+VALID_APP_IDS = os.getenv("VALID_APP_ID", "")
+
+def require_app_id():
+    """Middleware to check if App-ID is present and valid."""
+    app_id = request.headers.get("App-ID")
+
+    if not app_id:
+        logger.error("Unauthorized access: Missing App-ID.")
+        return ResponseHelper.unauthorized("Missing App-ID")
+
+    if app_id not in VALID_APP_IDS:
+        logger.error(f"Unauthorized access: Invalid App-ID {app_id}.")
+        return ResponseHelper.unauthorized("Invalid App-ID")
+
+    return None

app/middlewares/encryption.py

@@ -1,14 +1,14 @@
 # app/middlewares/encryption.py
-from cryptography.fernet import Fernet
-import os
+# from cryptography.fernet import Fernet
+# import os
 
-ENCRYPTION_KEY = os.getenv("ENCRYPTION_KEY", Fernet.generate_key())
-cipher = Fernet(ENCRYPTION_KEY)
+# ENCRYPTION_KEY = os.getenv("ENCRYPTION_KEY", Fernet.generate_key())
+# cipher = Fernet(ENCRYPTION_KEY)
 
-def encrypt_data(data):
-    """Encrypt sensitive data"""
-    return cipher.encrypt(data.encode()).decode()
+# def encryptdata(data):
+#     """Encrypt sensitive data"""
+#     return cipher.encrypt(data.encode()).decode()
 
-def decrypt_data(data):
-    """Decrypt sensitive data"""
-    return cipher.decrypt(data.encode()).decode()
+# def decrypt_data(data):
+#     """Decrypt sensitive data"""
+#     return cipher.decrypt(data.encode()).decode()

app/middlewares/verify_api_key.py

@@ -1,8 +1,20 @@
-# app/middlewares/auth.py
-from flask import request, jsonify
+from flask import request
+from app.helpers.response_helper import ResponseHelper
+from app.utils.logger import logger
+
+# Define a valid API key (store securely in environment variables)
+VALID_API_KEY = "your-secure-api-key"
 
 def require_api_key():
-    """Middleware to check if API key is present"""
+    """Middleware to check if API key is present and valid."""
     api_key = request.headers.get("X-API-KEY")
+
     if not api_key:
-        return jsonify({"error": "Missing API key"}), 403
+        logger.error("Unauthorized access: Missing API key.")
+        return ResponseHelper.unauthorized("Missing API key")
+
+    if api_key != VALID_API_KEY:
+        logger.error("Unauthorized access: Invalid API key.")
+        return ResponseHelper.unauthorized("Invalid API key")
+
+    return None