BankAdapterController.java

package com.checkout.paymentgw.bank.api;

import com.checkout.paymentgw.bank.api.dto.AuthorisationCommand;
import com.checkout.paymentgw.bank.api.dto.AuthorisationResult;
import com.checkout.paymentgw.bank.client.BankClient;
import jakarta.validation.Valid;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

/**
 * Internal-only endpoints. Not exposed through the public {@code api-gateway}.
 * Callers from inside the VPC use {@code POST /internal/authorise}.
 */
@RestController
@RequestMapping("/internal")
public class BankAdapterController {

    private final BankClient bank;

    public BankAdapterController(BankClient bank) {
        this.bank = bank;
    }

    @PostMapping("/authorise")
    public AuthorisationResult authorise(@Valid @RequestBody AuthorisationCommand command) {
        return bank.authorise(command);
    }
}