Secure HMAC Signature Validation for Inter-Service Calls

[Cedarich]

Complexity Score: 150

Description

Ensure that only the NestJS backend can call the Python AI layer.

Requirements

• Implement a middleware in FastAPI to verify HMAC signatures on all incoming requests.
• Use a shared secret key stored in environment variables.
• Reject requests with invalid or missing signatures with a 403 Forbidden.
• Add documentation on how to generate the signature in the NestJS backend.

---

[drips-wave]

This issue has been added to the Stellar Wave Program and is worth 150 Points.

🧑‍💻 Interested in contributing? Apply to work on this issue on Drips Wave, earn points, and receive rewards.

Warning

Only applications submitted via the apply link above will be considered. Please do not apply by commenting on the issue or opening a PR directly.

🤠 Repo maintainers: You can manage this issue's Points and Complexity on your Maintainer Dashboard here. Please keep an eye on applications and respond quickly 💙

ℹ️ Learn more about Drips Wave

[Mosas2000]

@Mosas2000 has applied to work on this issue as part of the Stellar Wave Program's 3rd wave.

Hi maintainer, I'd like to take on this issue as i'll fully implement what is requested as i'm a full-stack developer with experiences

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Mosas2000 to this issue.

[drips-wave]

Congratulations, @Mosas2000! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on March 30, 2026.

🧑‍💻 @Mosas2000: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue has been marked as completed by a Drips Wave moderator for @Mosas2000 as part of the Stellar Wave Program's 3rd Wave 🥳

Moderator's reason: [Auto-assessed] The contributor implemented a complete HMAC signature validation system across both the Python AI service and the NestJS backend, fulfilling all issue requirements. The PR includes well-structured middleware, comprehensive documentation, and extensive unit tests, and has been open for over 24 hours without any maintainer objections.

😎 @Mosas2000: You earned 150 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.

ℹ️ Note: This issue was marked complete via moderation. Points were issued even though the GitHub issue remains open.