gemini (kostenintensives) app-aufbauen

services/tenant_service.py

@@ -0,0 +1,59 @@
+# ==============================================================================
+# Formeleon - Multi-tenant Form Generator
+# Author: Björn Runden <br@runden.net>
+# Module: services/tenant_service.py
+# Description: Business logic for tenant management and validation.
+# ==============================================================================
+
+from typing import Optional
+from models import Tenant
+
+class TenantService:
+    """Service layer for handling tenant-related business logic."""
+
+    @staticmethod
+    def get_tenant_by_public_key(public_key: str) -> Optional[Tenant]:
+        """
+        Get tenant by public key.
+        
+        :param public_key: Public API key
+        :return: Tenant object or None
+        """
+        if not public_key:
+            return None
+        return Tenant.query.filter_by(public_key=public_key).first()
+
+    @staticmethod
+    def validate_origin(origin: str, tenant: Tenant) -> bool:
+        """
+        Validate that the request origin matches allowed origins for the tenant.
+        
+        :param origin: Request origin/referer
+        :param tenant: Tenant object to check against
+        :return: True if origin is allowed, False otherwise
+        """
+        if not origin:
+            return False
+        
+        # Remove trailing slash and protocol
+        origin = origin.rstrip('/')
+        
+        allowed_origins = tenant.get_allowed_origins_list()
+        
+        # Check for wildcard
+        if '*' in allowed_origins:
+            return True
+        
+        # Exact match
+        if origin in allowed_origins:
+            return True
+        
+        # Check if origin matches any allowed domain (with subdomains)
+        for allowed in allowed_origins:
+            if allowed.startswith('*'):
+                # Wildcard subdomain match
+                domain = allowed[1:]  # Remove leading *
+                if origin.endswith(domain):
+                    return True
+        
+        return False