Update server/app.py

server/app.py

@@ -21,18 +21,18 @@ AES_GCM_NONCE_SIZE = 12
 logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(name)s - %(levelname)s - %(message)s')
 logger = logging.getLogger(__name__)
 
-KEYLOCK_PRIV_KEY = os.environ.get('KEYLOCK_PRIV_KEY','./DEMO_ONLY_THIS _IS_SECRET_keylock_priv_key.pem')
+KEYLOCK_PRIV_KEY = os.environ.get('KEYLOCK_PRIV_KEY','./DEMO_ONLY_THIS_IS_SECRET_keylock_priv_key.pem')
 KEYLOCK_STATUS_MESSAGE = ""
-
+KEY_DIR = "./keys/"
 if not KEYLOCK_PRIV_KEY:
     try:
-        with open("keylock_priv.pem", "r") as f:
+        with open(f"{KEY_DIR}keylock_priv.pem", "r") as f:
             KEYLOCK_PRIV_KEY = f.read()
-        logger.warning("Loaded private key from 'keylock_priv.pem'. This is for local testing only.")
-        KEYLOCK_STATUS_MESSAGE = "⚠️ Loaded from `keylock_priv.pem` file. This is for local testing but insecure for production."
+        logger.warning(f"Loaded private key from '{KEY_DIR}keylock_priv.pem'. This is for local testing only.")
+        KEYLOCK_STATUS_MESSAGE = f"⚠️ Loaded from `{KEY_DIR}keylock_priv.pem` file. This is for local testing but insecure for production."
     except FileNotFoundError:
         logger.error("FATAL: Private key not found. API is non-functional.")
-        KEYLOCK_STATUS_MESSAGE = "❌ NOT FOUND. The API is non-functional. Set the `KEYLOCK_PRIV_KEY` secret or provide a `keylock_priv.pem` file."
+        KEYLOCK_STATUS_MESSAGE = f"❌ NOT FOUND. The API is non-functional. Set the `KEYLOCK_PRIV_KEY` secret or provide a `{KEY_DIR}keylock_priv.pem` file."
 else:
     logger.info("Successfully loaded private key from environment variable 'KEYLOCK_PRIV_KEY'.")
     KEYLOCK_STATUS_MESSAGE = "✅ Loaded successfully from secrets/environment variable. Recommended secure configuration."