Update app.py

app.py

@@ -68,10 +68,13 @@ def sign_payload():
     """
     Generate RSA-SHA256 signature for a given string payload.
     Body: { "payload": "string-to-sign" }
-    Returns: { "signature": "base64_signature" }
+    Returns: { "sign": "base64_signature" }
     """
     try:
-        import rsa, base64
+        import base64
+        from Crypto.PublicKey import RSA
+        from Crypto.Signature import pkcs1_15
+        from Crypto.Hash import SHA256
 
         data = request.get_json(force=True)
         payload = data.get("payload", "")
@@ -79,30 +82,19 @@ def sign_payload():
         if not payload:
             return jsonify({"error": "Missing 'payload' field"}), 400
 
-        # 🔒 Clean and load your PEM private key properly
-        key_data = PRIVATE_KEY.encode()
-        try:
-            priv_key = rsa.PrivateKey.load_pkcs1(key_data)
-        except Exception:
-            # Some keys use PKCS#8 format, handle conversion
-            from Crypto.PublicKey import RSA as CryptoRSA
-            from Crypto.Signature import pkcs1_15
-            from Crypto.Hash import SHA256
-            import base64
-
-            # Fallback for PKCS#8 keys
-            crypto_key = CryptoRSA.import_key(PRIVATE_KEY)
-            h = SHA256.new(payload.encode())
-            signature = pkcs1_15.new(crypto_key).sign(h)
-            signature_b64 = base64.b64encode(signature).decode()
-            return jsonify({"signature": signature_b64}), 200
-
-        # ✅ Sign using rsa library (PKCS#1 v1.5)
-        signature = rsa.sign(payload.encode(), priv_key, 'SHA-256')
-        signature_b64 = base64.b64encode(signature).decode()
-
-        print("✅ Generated signature for:", payload)
-        return jsonify({"signature": signature_b64}), 200
+        # Load your PEM private key
+        private_key = RSA.import_key(PRIVATE_KEY)
+
+        # Compute SHA256 hash of the exact payload string
+        h = SHA256.new(payload.encode('utf-8'))
+
+        # Sign it
+        signature = pkcs1_15.new(private_key).sign(h)
+
+        # Return base64-encoded signature as 'sign' (what your custom action expects)
+        signature_b64 = base64.b64encode(signature).decode('utf-8')
+
+        return jsonify({"sign": signature_b64}), 200
 
     except Exception as e:
         print("🔥 Error generating signature:", str(e))