feat(hooks): make signing secret optional (#23)

* fix: make signing secret optional

Make signing secret optional in cases where we only need to authenticate a user

* Update README.md

README.md

@@ -21,6 +21,10 @@ Initialise a new Terra instance with:
 ```py
 from terra.base_client import Terra
 
+# For user authentication
+terra = Terra(api_key='YOUR API KEY', dev_id='YOUR DEV ID');
+
+# For web hook endpoints
 terra = Terra(api_key='YOUR API KEY', dev_id='YOUR DEV ID', secret='YOUR TERRA SECRET');
 ```
 

terra/base_client.py

@@ -39,11 +39,11 @@ class Terra:
     Args:
         api_key (:obj:`str`) : Your API Key
         dev_id (:obj:`str`) : Your dev ID
-        secret (:obj:`str`) : Your terra secret (for web hooks)
+        secret (:obj:`str`, optional): Your terra secret (for web hooks). Defaults to None.
 
     """
 
-    def __init__(self, api_key: str, dev_id: str, secret: str) -> None:
+    def __init__(self, api_key: str, dev_id: str, secret: typing.Optional[str] = None) -> None:
         self.api_key = api_key
         self.dev_id = dev_id
         self.secret = secret
@@ -480,6 +480,9 @@ def check_terra_signature(self, body: str, header: str) -> bool:
         Returns:
             :obj:`bool`: True if the API response comes from Terra
         """
+        if self.secret is None:
+            raise ValueError("A valid 'secret' is required for web hooks. Please provide your Terra secret.")
+
 
         t, sig = (pair.split("=")[-1] for pair in header.split(","))