Merge pull request #293 from minvws/feat/root-path

feat: root path on app

Author: fouadsfarijlani

app.conf.example

@@ -25,6 +25,8 @@ use_ssl = False
 ssl_base_dir = secrets/ssl
 ssl_cert_file = server.cert
 ssl_key_file = server.key
+# The root path if behind a proxy
+root_path =
 
 [oprf]
 # Local key fallback: file with base64 server key (used when hsm_url is not set)

app/application.py

@@ -78,6 +78,7 @@ def setup_fastapi() -> FastAPI:
             title="Pseudoniemendienst API",
             summary="API for the Pseudoniemendienst",
             description="Provides endpoints for OPRF, key management, organization management, and RID exchange.",
+            root_path=config.uvicorn.root_path,
         )
         if config.uvicorn.swagger_enabled
         else FastAPI(docs_url=None, redoc_url=None)

app/config.py

@@ -76,6 +76,7 @@ class ConfigUvicorn(BaseModel):
     ssl_base_dir: str | None = Field(default=None)
     ssl_cert_file: str | None = Field(default=None)
     ssl_key_file: str | None = Field(default=None)
+    root_path: str = Field(default="")
 
 
 class ConfigOprf(BaseModel):

app/routers/exchange.py

@@ -155,7 +155,10 @@ def receive(
         elif isinstance(pid, dict):
             personal_id = PersonalId.from_dict(pid)
         else:
-            logger.warning("invalid personal_id format in RID payload: unexpected type %s", type(pid).__name__)
+            logger.warning(
+                "invalid personal_id format in RID payload: unexpected type %s",
+                type(pid).__name__,
+            )
             raise InvalidRID(message="Invalid personal_id format in RID payload")
     except Exception:
         logger.warning("failed to parse personal_id from RID payload")

app/services/oprf/oprf_service.py

@@ -43,7 +43,9 @@ def eval_blind(self, req: BlindRequest, pub_key: jwk.JWK) -> str:
             logger.exception("unable to evaluate blind")
             raise ValueError(f"unable to evaluate blind: {e}")
 
-        subject = "pseudonym:eval:" + base64.urlsafe_b64encode(eval_bytes).decode("utf-8")
+        subject = "pseudonym:eval:" + base64.urlsafe_b64encode(eval_bytes).decode(
+            "utf-8"
+        )
         jwe = BlindJwe.build(
             audience=req.recipientOrganization,
             scope=req.recipientScope,
@@ -72,7 +74,9 @@ def _eval_via_hsm(self, recipient_org: str, blinded_bytes: bytes) -> bytes:
             },
             timeout=10,
             verify=cfg.hsm_ca_cert_file or True,
-            cert=(cfg.hsm_cert_file, cfg.hsm_key_file) if (cfg.hsm_cert_file and cfg.hsm_key_file) else None,
+            cert=(cfg.hsm_cert_file, cfg.hsm_key_file)
+            if (cfg.hsm_cert_file and cfg.hsm_key_file)
+            else None,
         )
         response.raise_for_status()
         return base64.b64decode(response.json()["result"])