use updated kissflow auth

Author: fredrik0x

.env.example

@@ -5,6 +5,8 @@ AWS_REGION='us-east-1'
 SES_FROM_EMAIL=''
 TURNSTILE_SITE_KEY=''
 TURNSTILE_SECRET_KEY=''
-KISSFLOW_API_KEY=''
+KISSFLOW_SUBDOMAIN='ethereum'
+KISSFLOW_ACCESS_KEY_ID=''
+KISSFLOW_ACCESS_KEY_SECRET=''
 KISSFLOW_ACCOUNT_ID=''
 KISSFLOW_PROCESS_ID=''

README.md

@@ -34,7 +34,9 @@ The application now supports automatic integration with Kissflow for KYC submiss
 To enable Kissflow integration:
 1. Add the following to your `.env` file:
    ```
-   KISSFLOW_API_KEY=your_api_key
+   KISSFLOW_SUBDOMAIN=ethereum
+   KISSFLOW_ACCESS_KEY_ID=your_access_key_id
+   KISSFLOW_ACCESS_KEY_SECRET=your_access_key_secret
    KISSFLOW_ACCOUNT_ID=your_account_id
    KISSFLOW_PROCESS_ID=your_aog_process_id
    ```

server.py

@@ -191,20 +191,24 @@ def find_aog_item_by_grant_id(grant_id):
     Returns the item ID if found, None otherwise.
     """
     try:
-        api_key = os.getenv('KISSFLOW_API_KEY')
+        subdomain = os.getenv('KISSFLOW_SUBDOMAIN', 'ethereum')
+        access_key_id = os.getenv('KISSFLOW_ACCESS_KEY_ID')
+        access_key_secret = os.getenv('KISSFLOW_ACCESS_KEY_SECRET')
         account_id = os.getenv('KISSFLOW_ACCOUNT_ID')
         process_id = os.getenv('KISSFLOW_PROCESS_ID')
 
-        if not all([api_key, account_id, process_id]):
+        if not all([access_key_id, access_key_secret, account_id, process_id]):
             logging.error("Missing Kissflow configuration")
             return None
 
         # Kissflow API endpoint to search for items
-        url = f"https://api.kissflow.com/api/v1/accounts/{account_id}/processes/{process_id}/items"
+        url = f"https://{subdomain}.kissflow.com/process/2/{account_id}/{process_id}/items"
 
         headers = {
-            'Authorization': f'Bearer {api_key}',
-            'Content-Type': 'application/json'
+            'Accept': 'application/json',
+            'Content-Type': 'application/json',
+            'X-Access-Key-Id': access_key_id,
+            'X-Access-Key-Secret': access_key_secret
         }
 
         # Search for items with matching Grant ID in Request_number field
@@ -233,20 +237,24 @@ def update_aog_kyc_comments(item_id, legal_identifier):
     Updates the KYC_Comments field in a Kissflow AOG item with the legal identifier.
     """
     try:
-        api_key = os.getenv('KISSFLOW_API_KEY')
+        subdomain = os.getenv('KISSFLOW_SUBDOMAIN', 'ethereum')
+        access_key_id = os.getenv('KISSFLOW_ACCESS_KEY_ID')
+        access_key_secret = os.getenv('KISSFLOW_ACCESS_KEY_SECRET')
         account_id = os.getenv('KISSFLOW_ACCOUNT_ID')
         process_id = os.getenv('KISSFLOW_PROCESS_ID')
 
-        if not all([api_key, account_id, process_id]):
+        if not all([access_key_id, access_key_secret, account_id, process_id]):
             logging.error("Missing Kissflow configuration")
             return False
 
         # Kissflow API endpoint to update an item
-        url = f"https://api.kissflow.com/api/v1/accounts/{account_id}/processes/{process_id}/items/{item_id}"
+        url = f"https://{subdomain}.kissflow.com/process/2/{account_id}/{process_id}/items/{item_id}"
 
         headers = {
-            'Authorization': f'Bearer {api_key}',
-            'Content-Type': 'application/json'
+            'Accept': 'application/json',
+            'Content-Type': 'application/json',
+            'X-Access-Key-Id': access_key_id,
+            'X-Access-Key-Secret': access_key_secret
         }
 
         # Update the KYC_Comments field

test_kissflow_integration.py

@@ -28,14 +28,17 @@ def test_environment_variables():
     """Test that all required Kissflow environment variables are set"""
     print("Testing environment variables...")
 
-    required_vars = ['KISSFLOW_API_KEY', 'KISSFLOW_ACCOUNT_ID', 'KISSFLOW_PROCESS_ID']
+    required_vars = ['KISSFLOW_SUBDOMAIN', 'KISSFLOW_ACCESS_KEY_ID', 'KISSFLOW_ACCESS_KEY_SECRET', 'KISSFLOW_ACCOUNT_ID', 'KISSFLOW_PROCESS_ID']
     missing_vars = []
 
     for var in required_vars:
         value = os.getenv(var)
         if value:
-            # Mask the value for security
-            masked_value = value[:4] + '...' + value[-4:] if len(value) > 8 else '***'
+            # Mask the value for security (except subdomain)
+            if var == 'KISSFLOW_SUBDOMAIN':
+                masked_value = value
+            else:
+                masked_value = value[:4] + '...' + value[-4:] if len(value) > 8 else '***'
             print(f"✓ {var}: {masked_value}")
         else:
             print(f"✗ {var}: NOT SET")