Update app.py

app.py

@@ -1,8 +1,14 @@
 from flask import Flask, request, jsonify
+import base64, hashlib, hmac, rsa
 
 app = Flask(__name__)
 
-# ✅ Route 1: PayerMax Callback (used in PayerMax Dashboard)
+# ⚙️ Replace this with your real PayerMax private key (PEM string)
+PRIVATE_KEY = """-----BEGIN RSA PRIVATE KEY-----
+YOUR_RSA_PRIVATE_KEY_CONTENT_HERE
+-----END RSA PRIVATE KEY-----"""
+
+# ✅ 1. PayerMax callback endpoint
 @app.route("/payermax", methods=["POST", "GET"])
 def payermax_notify():
     try:
@@ -15,14 +21,12 @@ def payermax_notify():
         return "success", 200
 
 
-# ✅ Route 2: Test Endpoint (you’ll call this from FlutterFlow)
+# ✅ 2. FlutterFlow test endpoint
 @app.route("/test", methods=["POST"])
 def test_endpoint():
     try:
         data = request.get_json(force=True, silent=True)
         print("🧪 FlutterFlow test data:", data)
-
-        # Send back a response to show it works
         return jsonify({
             "status": "ok",
             "message": "Received test data successfully!",
@@ -30,10 +34,34 @@ def test_endpoint():
         }), 200
     except Exception as e:
         print("🔥 Error in test endpoint:", str(e))
-        return jsonify({
-            "status": "error",
-            "message": str(e)
-        }), 500
+        return jsonify({"status": "error", "message": str(e)}), 500
+
+
+# ✅ 3. Signature generator endpoint
+@app.route("/sign", methods=["POST"])
+def sign_payload():
+    """
+    Expects JSON body with a single field `payload` (the string you need to sign).
+    Returns base64-encoded RSA-SHA256 signature.
+    """
+    try:
+        data = request.get_json(force=True)
+        payload = data.get("payload", "")
+        if not payload:
+            return jsonify({"error": "Missing 'payload' field"}), 400
+
+        # Load private key
+        priv_key = rsa.PrivateKey.load_pkcs1(PRIVATE_KEY.encode())
+
+        # Create signature
+        signature = rsa.sign(payload.encode(), priv_key, 'SHA-256')
+        signature_b64 = base64.b64encode(signature).decode()
+
+        print("✅ Generated signature for payload:", payload)
+        return jsonify({"signature": signature_b64}), 200
+    except Exception as e:
+        print("🔥 Error generating signature:", str(e))
+        return jsonify({"error": str(e)}), 500
 
 
 if __name__ == "__main__":