P5-4418 validate Pwinty SKU code

api/lib/prices.py

@@ -3,6 +3,7 @@
 
 from api.lib.utils import round_half_up
 from api.lib.limits import calculate_canvas_limits
+from api.lib import pwinty
 
 
 def m2_price(
@@ -300,17 +301,17 @@ def framed_print_price(
     sku, market, designer=None, reseller=None, inquiry=None, rounded=True, inc_vat=True
 ):
     sku_prices = {
-        "GLOBAL-CFP-12x12": 446,
-        "GLOBAL-CFP-11x14": 478,
-        "GLOBAL-CFP-12x16": 494,
-        "GLOBAL-CFP-16x20": 574,
-        "GLOBAL-CFP-20x20": 690,
-        "GLOBAL-CFP-18x24": 708,
-        "GLOBAL-CFP-20x28": 761,
-        "GLOBAL-CFP-24x32": 831,
-        "GLOBAL-CFP-28x28": 867,
-        "GLOBAL-CFP-24x36": 1035,
-        "GLOBAL-CFP-28x40": 1127,
+        pwinty.GLOBAL_CFP_12x12: 446,
+        pwinty.GLOBAL_CFP_11x14: 478,
+        pwinty.GLOBAL_CFP_12x16: 494,
+        pwinty.GLOBAL_CFP_16x20: 574,
+        pwinty.GLOBAL_CFP_20x20: 690,
+        pwinty.GLOBAL_CFP_18x24: 708,
+        pwinty.GLOBAL_CFP_20x28: 761,
+        pwinty.GLOBAL_CFP_24x32: 831,
+        pwinty.GLOBAL_CFP_28x28: 867,
+        pwinty.GLOBAL_CFP_24x36: 1035,
+        pwinty.GLOBAL_CFP_28x40: 1127,
     }
 
     if not sku in sku_prices:

api/lib/pwinty.py

@@ -0,0 +1,25 @@
+GLOBAL_CFP_12x12 = "GLOBAL-CFP-12x12"
+GLOBAL_CFP_11x14 = "GLOBAL-CFP-11x14"
+GLOBAL_CFP_12x16 = "GLOBAL-CFP-12x16"
+GLOBAL_CFP_16x20 = "GLOBAL-CFP-16x20"
+GLOBAL_CFP_20x20 = "GLOBAL-CFP-20x20"
+GLOBAL_CFP_18x24 = "GLOBAL-CFP-18x24"
+GLOBAL_CFP_20x28 = "GLOBAL-CFP-20x28"
+GLOBAL_CFP_24x32 = "GLOBAL-CFP-24x32"
+GLOBAL_CFP_28x28 = "GLOBAL-CFP-28x28"
+GLOBAL_CFP_24x36 = "GLOBAL-CFP-24x36"
+GLOBAL_CFP_28x40 = "GLOBAL-CFP-28x40"
+
+SKU_CODES = [
+    GLOBAL_CFP_12x12,
+    GLOBAL_CFP_11x14,
+    GLOBAL_CFP_12x16,
+    GLOBAL_CFP_16x20,
+    GLOBAL_CFP_20x20,
+    GLOBAL_CFP_18x24,
+    GLOBAL_CFP_20x28,
+    GLOBAL_CFP_24x32,
+    GLOBAL_CFP_28x28,
+    GLOBAL_CFP_24x36,
+    GLOBAL_CFP_28x40,
+]

api/resources/prices.py

@@ -1,10 +1,11 @@
 from flask import Blueprint, request, jsonify, abort
 from api.helpers import check_api_key
-from api.validators import validate_territory, validate_number
+from api.validators import validate_territory, validate_number, validate_any_of
 from api.models.inquiry import Inquiry
 from api.models.product import Material, Product
 from api.models.contract_customer import ContractCustomer
 from api.models import market as market_model
+from api.lib import pwinty
 from api.lib.prices import (
     wallpaper_price,
     canvas_price,
@@ -242,6 +243,7 @@ def poster_hanger():
 
 @mod.route("/framed-print", methods=["GET"])
 @validate_territory("territory")
+@validate_any_of("sku", pwinty.SKU_CODES)
 def framed_print():
     sku = request.args.get("sku", type=str)
     market = market_model.from_territory(request.args.get("territory"))

api/validators.py

@@ -94,3 +94,22 @@ def validate_territory(*keys):
         return wrapper
 
     return decorator
+
+
+def validate_any_of(key, values):
+    def decorator(f):
+        @wraps(f)
+        def wrapper(*args, **kwargs):
+            _check_parameter_exists(key)
+            value = request.args.get(key)
+            if not value in values:
+                raise ValidationError(
+                    "{} contains an invalid value, must be one of: {}".format(
+                        key, values
+                    )
+                )
+            return f(*args, **kwargs)
+
+        return wrapper
+
+    return decorator